From a973fe10305c7d080d5c017ddd9b2bd860221659 Mon Sep 17 00:00:00 2001 From: Paul Eggleton Date: Fri, 21 Mar 2014 16:31:31 +0000 Subject: [PATCH] classes/image: disable pam nullok_secure with debug-tweaks If you want passwordless logins to work with pam enabled, then you can't have "nullok_secure" enabled on pam_unix entries. Add some postprocessing to change these to "nullok" when debug-tweaks is in IMAGE_FEATURES, in order to make passwordless logins with PAM work again. Fixes [YOCTO #5973]. Signed-off-by: Paul Eggleton Signed-off-by: Richard Purdie --- meta/classes/image.bbclass | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/meta/classes/image.bbclass b/meta/classes/image.bbclass index 9a04288ba6..3436624c9d 100644 --- a/meta/classes/image.bbclass +++ b/meta/classes/image.bbclass @@ -298,6 +298,10 @@ ssh_allow_empty_password () { printf '\nDROPBEAR_EXTRA_ARGS="-B"\n' >> ${IMAGE_ROOTFS}${sysconfdir}/default/dropbear fi fi + + if [ -d ${IMAGE_ROOTFS}${sysconfdir}/pam.d ] ; then + sed -i 's/nullok_secure/nullok/' ${IMAGE_ROOTFS}${sysconfdir}/pam.d/* + fi } # Enable postinst logging if debug-tweaks is enabled -- 2.40.1