summaryrefslogtreecommitdiff
path: root/meta-unit-core/recipes-extended/shadow
diff options
context:
space:
mode:
authorunitexe <unitexe70@gmail.com>2026-01-03 15:23:38 -0600
committerunitexe <unitexe70@gmail.com>2026-01-03 15:39:21 -0600
commitf2738c399dffe325b5add7b912d9562484f071e3 (patch)
treebc83ab2a3decfa9ff38a57b3cd4c8c76ad9743b3 /meta-unit-core/recipes-extended/shadow
parenta94f9b9fdf29d0f27349599aa73a585ba78949d6 (diff)
Introduce core-image-unit
- Add unitexe user - Configured for public key authentication SSH - Part of sudoers (via drop-in) so admin tasks can be performed - No root login via SSH or TTY allowed - TTY is restricted via PAM - Added misc. utilities
Diffstat (limited to 'meta-unit-core/recipes-extended/shadow')
-rw-r--r--meta-unit-core/recipes-extended/shadow/shadow-securetty_%.bbappend4
1 files changed, 4 insertions, 0 deletions
diff --git a/meta-unit-core/recipes-extended/shadow/shadow-securetty_%.bbappend b/meta-unit-core/recipes-extended/shadow/shadow-securetty_%.bbappend
new file mode 100644
index 0000000..9d17d9b
--- /dev/null
+++ b/meta-unit-core/recipes-extended/shadow/shadow-securetty_%.bbappend
@@ -0,0 +1,4 @@
+do_install:append() {
+ # Empty securetty to disallow root login on all TTYs.
+ echo -n > ${D}${sysconfdir}/securetty
+}