ubuntu-phone team mailing list archive

[Oliver Grawert <ogra@xxxxxxxxxx>]

hi,
Am Montag, den 07.07.2014, 12:43 +0200 schrieb Oliver Grawert:

> 3) on request of the security team it should not be possible to enable
> adb access if there is no password or the default password set for the
> phablet user so that there is no predictable sudo password that is
> identical on all devices. there are still a few blockers that prevent us
> from finishing this bit (more on that below).

a binary package with this functionality implemented can be found at [1]
now in case anyone is fancy testing it (note you might lock you out,
make sure to have the terminal app available) 

the adbd service now checks if the password is either unset or matches
the username (our default at image creation time) and if either applies
it will exit ... you can check this
in /var/log/upstart/android-tools-adbd.log

ciao
	oli

[1] http://people.canonical.com/~ogra/android-tools-adbd_4.2.2
+git20130218-3ubuntu24_armhf-passwd-check.deb

Attachment: signature.asc
Description: This is a digitally signed message part