From e816f396964287fcd16c61c76f78ee0025ca2e92 Mon Sep 17 00:00:00 2001 From: Michael Opdenacker Date: Wed, 15 Jun 2022 17:59:08 +0200 Subject: [PATCH] ref-manual: correct description of empty-root-passwd in IMAGE_FEATURES "empty-root-passwd" doesn't actually set an empty root password. It just doesn't touch the initial root password which is empty by default. (From yocto-docs rev: 793cfe841148ead7e22fc2caf045247ab27a15da) Signed-off-by: Michael Opdenacker Signed-off-by: Richard Purdie --- documentation/ref-manual/features.rst | 15 +++++++++++++-- 1 file changed, 13 insertions(+), 2 deletions(-) diff --git a/documentation/ref-manual/features.rst b/documentation/ref-manual/features.rst index f566b00c58..a8d0dac996 100644 --- a/documentation/ref-manual/features.rst +++ b/documentation/ref-manual/features.rst @@ -218,8 +218,19 @@ Here are the image features available for all images: - *doc-pkgs:* Installs documentation packages for all packages installed in a given image. -- *empty-root-password:* Sets the root password to an empty string, - which allows logins with a blank password. +- *empty-root-password:* This feature or ``debug-tweaks`` is required if + you want to allow root login with an empty password. If these features + are not present in :term:`IMAGE_FEATURES`, a non-empty password is + forced in ``/etc/passwd`` and ``/etc/shadow`` if such files exist. + + .. note:: + ``empty-root-passwd`` doesn't set an empty root password by itself. + You get an initial empty root password thanks to the + :oe_git:`base-passwd ` + and :oe_git:`shadow ` + recipes, and the presence of ``empty-root-passwd`` or ``debug-tweaks`` + just disables the mechanism which forces an non-empty password for the + root user. - *overlayfs-etc:* Configures the ``/etc`` directory to be in ``overlayfs``. This allows to store device specific information elsewhere, especially