[OpenWrt-Devel] [PATCH] base-files utils/busybox: Make requiring login in console default for easily accessed devices

[Imre Kaloz]

On Wed, 23 Dec 2015 13:43:14 +0100, Daniel Dickinson  
<openwrt at daniel.thecshore.com> wrote:

> Oh, and I think that initially this should be default off configuration  
> option that people who are able to flash firmware via bootloader in case  
> of getting locked out encourage to test before pushing this as default.
>
> I'd hate to have some corner case result in bricked routers for people  
> who have no means of recovering from a bad flash.

You can reflash from the bootloader all the time, we are talking about  
userland here. IMHO this should be just a normal change, like dropping  
telnet. Enforcing login should be on by default, specially since if one  
forgets the password they can just reset everything to defaults keeping  
the reset button pressed.


Imre
_______________________________________________
openwrt-devel mailing list
openwrt-devel at lists.openwrt.org
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel