From patchwork Wed Feb 7 16:48:49 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Ross Burton X-Patchwork-Id: 38998 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 90A23C4828D for ; Wed, 7 Feb 2024 16:48:58 +0000 (UTC) Received: from foss.arm.com (foss.arm.com [217.140.110.172]) by mx.groups.io with SMTP id smtpd.web11.2521.1707324533075337759 for ; Wed, 07 Feb 2024 08:48:53 -0800 Authentication-Results: mx.groups.io; dkim=none (message not signed); spf=pass (domain: arm.com, ip: 217.140.110.172, mailfrom: ross.burton@arm.com) Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.121.207.14]) by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 28F171FB for ; Wed, 7 Feb 2024 08:49:35 -0800 (PST) Received: from oss-tx204.lab.cambridge.arm.com (usa-sjc-imap-foss1.foss.arm.com [10.121.207.14]) by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPA id 47AD63F762 for ; Wed, 7 Feb 2024 08:48:52 -0800 (PST) From: ross.burton@arm.com To: poky@lists.yoctoproject.org Subject: [PATCH v2] base-files: add usage warning to motd Date: Wed, 7 Feb 2024 16:48:49 +0000 Message-Id: <20240207164849.4039004-1-ross.burton@arm.com> X-Mailer: git-send-email 2.34.1 MIME-Version: 1.0 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 07 Feb 2024 16:48:58 -0000 X-Groupsio-URL: https://lists.yoctoproject.org/g/poky/message/13251 From: Ross Burton The Poky distro is explicitly a _reference_ distribution for _testing_ and _development_ purposes. It enables most hardware and software features so that they can be tested, but this also means that from a security point of view the attack surface is very large. We encourage anyone using OpenEmbedded for production use to create their own distribution and not use Poky. To encourage this behaviour further, add a warning to /etc/motd when Poky is used so the developer will see it when they log in. Signed-off-by: Ross Burton --- meta-poky/recipes-core/base-files/base-files_%.bbappend | 1 + meta-poky/recipes-core/base-files/files/poky/motd | 5 +++++ 2 files changed, 6 insertions(+) create mode 100644 meta-poky/recipes-core/base-files/base-files_%.bbappend create mode 100644 meta-poky/recipes-core/base-files/files/poky/motd diff --git a/meta-poky/recipes-core/base-files/base-files_%.bbappend b/meta-poky/recipes-core/base-files/base-files_%.bbappend new file mode 100644 index 00000000000..8802adbb46b --- /dev/null +++ b/meta-poky/recipes-core/base-files/base-files_%.bbappend @@ -0,0 +1 @@ +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" diff --git a/meta-poky/recipes-core/base-files/files/poky/motd b/meta-poky/recipes-core/base-files/files/poky/motd new file mode 100644 index 00000000000..0fb6e633f0a --- /dev/null +++ b/meta-poky/recipes-core/base-files/files/poky/motd @@ -0,0 +1,5 @@ + +WARNING: Poky is a reference Yocto Project distribution that should be used for +testing and development purposes only. It is recommended that you create your +own distribution for production use. +