From mboxrd@z Thu Jan 1 00:00:00 1970 X-GM-THRID: 6654882193514430464 X-Received: by 2002:a2e:505a:: with SMTP id v26-v6mr671788ljd.5.1549460504053; Wed, 06 Feb 2019 05:41:44 -0800 (PST) X-BeenThere: isar-users@googlegroups.com Received: by 2002:a19:7609:: with SMTP id c9ls2342317lff.0.gmail; Wed, 06 Feb 2019 05:41:43 -0800 (PST) X-Google-Smtp-Source: AHgI3IbE+sLbU332J5kmw4NYL+YSKzkAKgbrXrLmvPfs/AtPnDH6uJWx30GVwjUhVPEluDLtKco8 X-Received: by 2002:ac2:5396:: with SMTP id g22mr696177lfh.9.1549460503531; Wed, 06 Feb 2019 05:41:43 -0800 (PST) ARC-Seal: i=1; a=rsa-sha256; t=1549460503; cv=none; d=google.com; s=arc-20160816; b=b4IN1zScX6NyrYHvQ75Udj5M136rf8YnW5TL9okiTYM6PAD0B+MCA28A76VdO+kBNP qpmu/scWo1sMnYjMzJbbo/gQbG0DxZf3e/FqhFCVWKznCuoM9vR5sV5j344c1Ne4PFKA uA6o3wG4LusVeY+Id7Bwt6CrFZWUNL4ayg8FFp+oRS0YWHLKpmLcRejAMga67NC7kbCT kdb0j824gXljKiq0yFJq81vi1AFbWhc8WWMwaj8NeWqYMqcEfjTpJnsnzW6X70PgeVCb s+V7AXen6pvyjOWA7RFoZG4tkDJXaoSJaxbi8LF9bX/e6KePsthtNhF6xdVhjfvCOAHF OSXQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from; bh=yB3bbUrvk7q8483zgcxRTEgYUS1ryEZLZc71DzWqMPE=; b=LBq4v/pGE0tewBi0+NanWvOtzfx5X5oItBy+XOrfcoqUwkZLJaRQfYfluVo0+nV+LU JFrLNqZoGU5D/MTI3fLIKDTXH5dWag51SX+1L+ONVXM4gKuQKYE9FM2sG4O3ofjCgSBR uIK5gLvgs8dP3FbiYH//Min3ceXFiVV+GdYWJBc/e14TxzAiyKkQPKLIxEq+aMsJe+0V C3qEJm9DHamKh54cUGpvnAVG2BvwGYtj1Gy1hRmBzy741QgxdYQ2YcKe8CYI4Iv9kVTX pMS18i/L3U791jqxMTr8u8Z2HpyC4SupZkkEqvQC6KXwmDnTeRJrei1BjULA3qBm1lwW uhfQ== ARC-Authentication-Results: i=1; gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com Return-Path: Received: from gecko.sbs.de (gecko.sbs.de. [194.138.37.40]) by gmr-mx.google.com with ESMTPS id q13si353334lfd.2.2019.02.06.05.41.43 for (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 06 Feb 2019 05:41:43 -0800 (PST) Received-SPF: pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.40 as permitted sender) client-ip=194.138.37.40; Authentication-Results: gmr-mx.google.com; spf=pass (google.com: domain of claudius.heine.ext@siemens.com designates 194.138.37.40 as permitted sender) smtp.mailfrom=claudius.heine.ext@siemens.com Received: from mail2.sbs.de (mail2.sbs.de [192.129.41.66]) by gecko.sbs.de (8.15.2/8.15.2) with ESMTPS id x16DfgR8020778 (version=TLSv1.2 cipher=DHE-RSA-AES256-GCM-SHA384 bits=256 verify=OK); Wed, 6 Feb 2019 14:41:42 +0100 Received: from ring.ppmd.siemens.net (linux-ses-ext02.ppmd.siemens.net [139.25.69.181]) by mail2.sbs.de (8.15.2/8.15.2) with ESMTP id x16DfgHV027988; Wed, 6 Feb 2019 14:41:42 +0100 From: claudius.heine.ext@siemens.com To: isar-users@googlegroups.com Cc: Claudius Heine Subject: [PATCH 0/1] Centralize root password configuration Date: Wed, 6 Feb 2019 14:41:38 +0100 Message-Id: <20190206134139.1597-1-claudius.heine.ext@siemens.com> X-Mailer: git-send-email 2.20.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-TUID: YKyv3mJuU4zz From: Claudius Heine Hi, this patchset depends on the `Template system` patchset. Cheers, Claudius Changes from the RFC patch: - Transformed package to be a transient package, prevents leaking of password via /var/lib/dpkg/info - Check if password was already set before setting it. Error if password was set already - Added possibility to set encrypted passwords - Fixed locking to allow restoration of choosen password when account is unlocked later - added documentation in RECIPE-API_CHANGELOG - removed isar-cfg-hostname - fix some scripting errors Claudius Heine (1): meta: add isar-cfg-rootpw recipe for setting root password RECIPE-API-CHANGELOG.md | 9 ++++++++ .../recipes-app/example-raw/files/postinst | 4 ---- meta/classes/isar-image.bbclass | 2 +- .../isar-cfg-rootpw/files/postinst.tmpl | 21 +++++++++++++++++++ .../isar-cfg-rootpw/isar-cfg-rootpw.bb | 20 ++++++++++++++++++ 5 files changed, 51 insertions(+), 5 deletions(-) create mode 100644 meta/recipes-support/isar-cfg-rootpw/files/postinst.tmpl create mode 100644 meta/recipes-support/isar-cfg-rootpw/isar-cfg-rootpw.bb -- 2.20.1