You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Is your feature request related to a problem? Please describe.
AsteroidOS is currently in the process of adding support for wifi. This means we have an unsecured user shell, and even worse, a completely unsecured root shell. It is worth adding a default password to provide a bare minimum example of security.
It's also not the best practice to force the user to actually log in as root - it's common for users to log in as root (eg. to upgrade packages) and then forget and continue working in a vulnerable root shell. A sudo package is already available in oe-core, it seems like this is worth adding.
The text was updated successfully, but these errors were encountered:
there are other solutions to improve default security.
on sailfishos, ssh and other developer features are disabled until 'developer mode' is enabled. This menu would give us a good place to inform the user about the risks of not having a password set up. It also means that users can connect their watches to wifi (eg. through UI) without worrying about someone sshing into their watch. This is less likely to stay unchanged and ignored than a default password
Is your feature request related to a problem? Please describe.
AsteroidOS is currently in the process of adding support for wifi. This means we have an unsecured user shell, and even worse, a completely unsecured root shell. It is worth adding a default password to provide a bare minimum example of security.
It's also not the best practice to force the user to actually log in as root - it's common for users to log in as root (eg. to upgrade packages) and then forget and continue working in a vulnerable root shell. A
sudo
package is already available in oe-core, it seems like this is worth adding.The text was updated successfully, but these errors were encountered: