From 918bd40d3e3f238a800b1486f70e2d5ee1d71a72 Mon Sep 17 00:00:00 2001 From: John Southworth Date: Tue, 4 Sep 2012 16:36:24 -0700 Subject: Bugfix 8290 Don't allow default password to persist after first boot. Due to the numerous ways a user can get a vyatta system this required a lot of changes. 1. Don't allow a user to set a password to 'vyatta' after first login, but allow it on the initial boot otherwise the system will have no user. 2. Don't allow the password to be set to vyatta in installer. 3. Force password change on first login. under the following conditions: 3.a. User is an admin level user. Operators do not have the abillity to change the config so they can't change passwords. Allow 'vyatta' to be the password until an admin logs in. 3.b. This is not the livecd, its silly to force a password change before install. --- etc/profile.d/vyatta-login.sh | 1 + 1 file changed, 1 insertion(+) create mode 100644 etc/profile.d/vyatta-login.sh (limited to 'etc') diff --git a/etc/profile.d/vyatta-login.sh b/etc/profile.d/vyatta-login.sh new file mode 100644 index 00000000..924295e3 --- /dev/null +++ b/etc/profile.d/vyatta-login.sh @@ -0,0 +1 @@ +/opt/vyatta/sbin/vyatta-first-login-passwd.sh -- cgit v1.2.3