[yocto] yocto Digest, Vol 85, Issue 78

[Alan Levy]

On Fri, 2017-10-20 at 15:24 +0300, Andreas Enbacka wrote:

> Hello,
>  
> I am trying to create a .bbappend file to customize the default 
> sshd_config file as part of the default openssh package in Yocto Fido. 
> In the custom file I attempt to disable root login access by setting 
> the PermitRootLogin to No. However, after building and installing the 
> image on the custom SMARC board, the content of the sshd_config file 
> still enables login (PermitRootLogin Yes). I have checked the content 
> of the installed rootfs before deploying to the board, and the content 
> of the sshd_config file is correct (disables root login). What could 
> be the cause of this? Is some other process modifying the content of 
> the config file?

This will happen if you use FILESEXTRAPATHS_append in your .bbappend because bitbake will find the default version of sshd_config first and not yours.  Make sure you use FILESEXTRAPATHS_prepend.

Actually I'm slightly surprised that you are having this problem in the first place because PermitRootLogin is commented out in the default version of sshd_config (poky/meta/recipes-connectivity/openssh/openssh/sshd_config). Perhaps another .bbappend somewhere in your build is also overwriting this file?

>  
> Best regards,
> Andreas Enbacka
>  

Regards
Alan

ALAN LEVY, Lead Consultant, Embedded Systems

Plextek Consulting, The Plextek Building, London Road, Great Chesterford, Saffron Walden, CB10 1NY, UK
T: +44 (0) 1799 533200    E: alan.levy at plextek.com  W: www.plextek.com