@@ -144,8 +144,10 @@ DISTRO ?= "poky"
# There are other features that can be used here too, see
# meta/classes-recipe/image.bbclass and
# meta/classes-recipe/core-image.bbclass for more details.
-# We default to allowing root login without a password for convenience.
-EXTRA_IMAGE_FEATURES ?= "allow-empty-password empty-root-password allow-root-login"
+#
+# The following will allow root login without a password for convenience.
+# Use with care, and never in product builds.
+#EXTRA_IMAGE_FEATURES ?= "allow-empty-password empty-root-password allow-root-login"
#
# Additional image features
This was not a good default; the autobuilder relied on it, but this has been fixed, there's now a separate fragment as well, and testimage has a check for the needed image features. Let's take this out and be more secure by default everywhere. Signed-off-by: Alexander Kanavin <alex@linutronix.de> --- meta-poky/conf/templates/default/local.conf.sample | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-)