From 0467e3addf9485d5844dd2be6696250d777788f2 Mon Sep 17 00:00:00 2001 From: "Robert P. J. Day" Date: Mon, 4 Aug 2014 13:49:09 +0300 Subject: dev-manual: Minor edits via patch to "common tasks" chapter. (From yocto-docs rev: b1516fb6e6d40e7668ca5a4d5804d1a09c7ed6f8) Signed-off-by: Scott Rifenbark Signed-off-by: Richard Purdie --- .../dev-manual/dev-manual-common-tasks.xml | 24 +++++++++++++--------- 1 file changed, 14 insertions(+), 10 deletions(-) (limited to 'documentation') diff --git a/documentation/dev-manual/dev-manual-common-tasks.xml b/documentation/dev-manual/dev-manual-common-tasks.xml index a373f92090..e5c1649f57 100644 --- a/documentation/dev-manual/dev-manual-common-tasks.xml +++ b/documentation/dev-manual/dev-manual-common-tasks.xml @@ -5104,7 +5104,7 @@ Gateways via their Web Interfaces" security problems. - Pay particular attention to to the security for + Pay particular attention to the security for any web-based administration interface. Web interfaces typically need to perform @@ -5182,7 +5182,7 @@ Gateways via their Web Interfaces" Use the following line in your local.conf file or in your custom distribution configuration file to enable the security - compiler and linker flags to your build: + compiler and linker flags for your build: require conf/distro/include/security_flags.inc @@ -5197,15 +5197,19 @@ Gateways via their Web Interfaces" OpenEmbedded build system to make your images more secure: - Ensure "debug-tweaks" is not listed with + Ensure "debug-tweaks" is not one of your selected IMAGE_FEATURES. - The default is to enable "debug-tweaks" by adding it - to - EXTRA_IMAGE_FEATURES - in local.conf. - However, you should comment out the variable or be - sure that it does not have "debug-tweaks" before - producing your final image. + When creating a new project, the default is to provide you + with an initial local.conf file that + enables this feature using the + EXTRA_IMAGE_FEATURES variable with the line: + + EXTRA_IMAGE_FEATURES = "debug-tweaks" + + To disable that feature, simply comment out that line in your + local.conf file, or + make sure IMAGE_FEATURES does not contain + "debug-tweaks" before producing your final image. Among other things, leaving this in place sets the root password as blank, which makes logging in for debugging or inspection easy during -- cgit 1.2.3-korg