diff options
| author | Tianling Shen <cnsztl@project-openwrt.eu.org> | 2021-02-08 01:48:21 +0800 |
|---|---|---|
| committer | Tianling Shen <cnsztl@project-openwrt.eu.org> | 2021-02-08 02:03:37 +0800 |
| commit | f45bb2981d41e1005a2658661da2475518835db8 (patch) | |
| tree | ca43b1b9b6a745fa12d63de1453eeb4527ff02fe /lang/python/python3 | |
| parent | f4dd722c3fb57c0d365d4a21a3a7fe8fc04dddd9 (diff) | |
ttyd: force enable authentication for login
Currently, we called `/usr/libexec/login.sh` as login command, but unfortunately the auth
is disabled by default in it[1], and this is really serious as it could be a free "backdoor"
for any spoiler who has conntectd to the router via LAN or wireless.
In my option, it shouldn't be exposed to anyone without auth, so I set the default login
command to `/bin/login`. And for those who really want that, they can do it themselves.
1. `login.sh` adjusts whether use authentication or not from system config named ttylogin,
which is set to disabled by default. See package/base-files/files/bin/config_generate#L243.
Signed-off-by: Tianling Shen <cnsztl@project-openwrt.eu.org>
Diffstat (limited to 'lang/python/python3')
0 files changed, 0 insertions, 0 deletions