From mboxrd@z Thu Jan 1 00:00:00 1970 From: Peter Korsgaard Date: Wed, 20 Mar 2019 09:58:11 +0100 Subject: [Buildroot] [RFC] openssh: add option to allow login as root In-Reply-To: (Arnout Vandecappelle's message of "Wed, 20 Mar 2019 01:23:42 +0100") References: <20190319114156.10696-1-esben.haabendal@gmail.com> <87mulqebah.fsf@dell.be.48ers.dk> Message-ID: <87imwdexcs.fsf@dell.be.48ers.dk> List-Id: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: buildroot@busybox.net >>>>> "Arnout" == Arnout Vandecappelle writes: Hi, >> We discussed it tonight on IRC and didn't really get to a good compromise. >> >> On one hand, we prefer to stick with upstream defaults (especially when >> security is involved) > This patch doesn't change the defaults. No, but the discussion on IRC included talking about if there should be an option or if we should unconditionally allow/disallow root logins. >> We prefer to not add configuration options for these kind of >> detailed policy decisions, > *That* is the crux of the matter. We normally only have configurability of > compile-time options, and assume that anything else is handled in post-build > scripts. The (only?) exception to that principle is the system menu. > So *maybe* something global in the system menu could work, and then dropbear > and openssh and whatnot would do whatever is needed to permit/disallow root > login for that particular package. But I'm not exactly ecstatic about that option. Me neither. >> as openssh has a LOT of other configuration >> options > True, but permitting root login is clearly one that is a lot more > important/relevant than all the others. Currently, the typical user will naively > enable openssh, then try to ssh into the device, and fail... Correct. It will also fail for dropbear as the root user by default does not have a password set. >> So all in all, this kind of policy tweaks are better done in a post >> build script. > In the few projects where I've seen openssh used, it was always with a custom > config file. Otherwise, there's not much reason to use openssh instead of > dropbear I guess. Indeed. I always use dropbear as well. -- Bye, Peter Korsgaard