From: Paul Eggleton <paul.eggleton@linux.intel.com>
Date: Fri, 21 Mar 2014 16:31:31 +0000 (+0000)
Subject: classes/image: disable pam nullok_secure with debug-tweaks
X-Git-Tag: 2015-4~3273
X-Git-Url: https://code.ossystems.io/gitweb?a=commitdiff_plain;h=a973fe10305c7d080d5c017ddd9b2bd860221659;p=openembedded-core.git

classes/image: disable pam nullok_secure with debug-tweaks

If you want passwordless logins to work with pam enabled, then you can't
have "nullok_secure" enabled on pam_unix entries. Add some
postprocessing to change these to "nullok" when debug-tweaks is in
IMAGE_FEATURES, in order to make passwordless logins with PAM work
again.

Fixes [YOCTO #5973].

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/classes/image.bbclass b/meta/classes/image.bbclass
index 9a04288ba6..3436624c9d 100644
--- a/meta/classes/image.bbclass
+++ b/meta/classes/image.bbclass
@@ -298,6 +298,10 @@ ssh_allow_empty_password () {
 			printf '\nDROPBEAR_EXTRA_ARGS="-B"\n' >> ${IMAGE_ROOTFS}${sysconfdir}/default/dropbear
 		fi
 	fi
+
+	if [ -d ${IMAGE_ROOTFS}${sysconfdir}/pam.d ] ; then
+		sed -i 's/nullok_secure/nullok/' ${IMAGE_ROOTFS}${sysconfdir}/pam.d/*
+	fi
 }
 
 # Enable postinst logging if debug-tweaks is enabled