[OpenWrt-Devel] [PATCH] base-files utils/busybox: Make requiring login in console default for easily accessed devices

Imre Kaloz kaloz at openwrt.org
Wed Dec 23 07:47:40 EST 2015

On Wed, 23 Dec 2015 13:43:14 +0100, Daniel Dickinson  
<openwrt at daniel.thecshore.com> wrote:

> Oh, and I think that initially this should be default off configuration  
> option that people who are able to flash firmware via bootloader in case  
> of getting locked out encourage to test before pushing this as default.
> I'd hate to have some corner case result in bricked routers for people  
> who have no means of recovering from a bad flash.

You can reflash from the bootloader all the time, we are talking about  
userland here. IMHO this should be just a normal change, like dropping  
telnet. Enforcing login should be on by default, specially since if one  
forgets the password they can just reset everything to defaults keeping  
the reset button pressed.

openwrt-devel mailing list
openwrt-devel at lists.openwrt.org

More information about the openwrt-devel mailing list