[SRU] Root account is not locked by default
Bug #230291 reported by
Nick Barcet
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ubuntu-vm-builder (Ubuntu) |
Fix Released
|
High
|
Unassigned |
Bug Description
Binary package hint: ubuntu-vm-builder
Until security update 0.4-0ubuntu0.1 u-v-b was not locking the root account nor setting a password for it.
Additionally, when using the --ssh parameter, the ssh key is added to the root account and not to the user account (this was not fixed in the security update.
Verifiability:
- create a VM using u-v-b 0.4 specifying the path to an ssh key
- on the console login prompt, type root
--> you are logged in with no password
- ls .ssh
--> view the authorized key stored there
Changed in ubuntu-vm-builder: | |
importance: | Undecided → High |
status: | New → Fix Committed |
To post a comment you must log in.
fix committed at http:// bazaar. launchpad. net/~ubuntu- virt/ubuntu- jeos/trunk/ revision/ 54