[Buildroot] [PATCH 1/2 v4] core/skeleton: drop /etc/securetty

Baruch Siach baruch at tkos.co.il
Mon Jul 13 10:46:19 UTC 2015


Hi Yann,

On Mon, Jul 13, 2015 at 12:37:35PM +0200, Yann E. MORIN wrote:
> On 2015-07-13 12:44 +0300, Baruch Siach spake thusly:
> > It would still break overlays with /etc/securetty (maybe locally 
> > modified). Why not just disable Busybox FEATURE_SECURETTY?
> 
> After discussing this with Thomas, we've decided to keep it, especially
> to keep the case you mention (custom securetty from overlay) is still
> working as expected.
> 
> The reasoning is that a user which installs a custom /etc/securetty will
> obviously have it contain the ttys he wants root to log in from, so he'd
> still be able to log in as root from those ttys.
> 
> But if we were to remove FEATURE_SECURETTY, then he'd still be able to
> log in as root from those ttys, but *also* from *any other* tty, and
> would probably not notice that change as this is a silent change.
> 
> So, we've concluded that we should keep FEATURE_SECURETTY since it works
> for our new use-case, and works for existing use-cases.

Makes sense. Thanks for the explanation.

baruch

-- 
     http://baruch.siach.name/blog/                  ~. .~   Tk Open Systems
=}------------------------------------------------ooO--U--Ooo------------{=
   - baruch at tkos.co.il - tel: +972.2.679.5364, http://www.tkos.co.il -



More information about the buildroot mailing list