diff options
author | Robert P. J. Day <rpjday@crashcourse.ca> | 2014-08-04 13:49:09 +0300 |
---|---|---|
committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-08-12 13:50:30 +0100 |
commit | 0467e3addf9485d5844dd2be6696250d777788f2 (patch) | |
tree | f19d826d11eaa5d396f12da3d72ba699799f0391 /documentation | |
parent | 93f0d03a8dc0b7071a324495277a4fe6d908b7da (diff) | |
download | openembedded-core-contrib-0467e3addf9485d5844dd2be6696250d777788f2.tar.gz |
dev-manual: Minor edits via patch to "common tasks" chapter.
(From yocto-docs rev: b1516fb6e6d40e7668ca5a4d5804d1a09c7ed6f8)
Signed-off-by: Scott Rifenbark <scott.m.rifenbark@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'documentation')
-rw-r--r-- | documentation/dev-manual/dev-manual-common-tasks.xml | 24 |
1 files changed, 14 insertions, 10 deletions
diff --git a/documentation/dev-manual/dev-manual-common-tasks.xml b/documentation/dev-manual/dev-manual-common-tasks.xml index a373f92090..e5c1649f57 100644 --- a/documentation/dev-manual/dev-manual-common-tasks.xml +++ b/documentation/dev-manual/dev-manual-common-tasks.xml @@ -5104,7 +5104,7 @@ Gateways via their Web Interfaces</ulink>"</emphasis> security problems. </para></listitem> <listitem><para> - Pay particular attention to to the security for + Pay particular attention to the security for any web-based administration interface. </para> <para>Web interfaces typically need to perform @@ -5182,7 +5182,7 @@ Gateways via their Web Interfaces</ulink>"</emphasis> Use the following line in your <filename>local.conf</filename> file or in your custom distribution configuration file to enable the security - compiler and linker flags to your build: + compiler and linker flags for your build: <literallayout class='monospaced'> require conf/distro/include/security_flags.inc </literallayout> @@ -5197,15 +5197,19 @@ Gateways via their Web Interfaces</ulink>"</emphasis> OpenEmbedded build system to make your images more secure: <itemizedlist> <listitem><para> - Ensure "debug-tweaks" is not listed with + Ensure "debug-tweaks" is not one of your selected <ulink url='&YOCTO_DOCS_REF_URL;#var-IMAGE_FEATURES'><filename>IMAGE_FEATURES</filename></ulink>. - The default is to enable "debug-tweaks" by adding it - to - <ulink url='&YOCTO_DOCS_REF_URL;#var-EXTRA_IMAGE_FEATURES'><filename>EXTRA_IMAGE_FEATURES</filename></ulink> - in <filename>local.conf</filename>. - However, you should comment out the variable or be - sure that it does not have "debug-tweaks" before - producing your final image. + When creating a new project, the default is to provide you + with an initial <filename>local.conf</filename> file that + enables this feature using the + <ulink url='&YOCTO_DOCS_REF_URL;#var-EXTRA_IMAGE_FEATURES'><filename>EXTRA_IMAGE_FEATURES</filename></ulink> variable with the line: + <literallayout class='monospaced'> + EXTRA_IMAGE_FEATURES = "debug-tweaks" + </literallayout> + To disable that feature, simply comment out that line in your + <filename>local.conf</filename> file, or + make sure <filename>IMAGE_FEATURES</filename> does not contain + "debug-tweaks" before producing your final image. Among other things, leaving this in place sets the root password as blank, which makes logging in for debugging or inspection easy during |