sysmo-bts
/
generic-poky
9
0
Fork 0
Code Pull Requests Releases Activity

dev-manual: Minor edits via patch to "common tasks" chapter. 

(From yocto-docs rev: b1516fb6e6d40e7668ca5a4d5804d1a09c7ed6f8)

Signed-off-by: Scott Rifenbark <scott.m.rifenbark@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Robert P. J. Day 2014-08-04 13:49:09 +03:00 committed by Richard Purdie
parent 93f0d03a8d
commit 0467e3addf
1 changed files with 14 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
documentation/dev-manual/dev-manual-common-tasks.xml
View File

@ -5104,7 +5104,7 @@ Gateways via their Web Interfaces</ulink>"</emphasis>
security problems.
</para></listitem>
<listitem><para>
Pay particular attention to to the security for
Pay particular attention to the security for
any web-based administration interface.
</para>
<para>Web interfaces typically need to perform
@ -5182,7 +5182,7 @@ Gateways via their Web Interfaces</ulink>"</emphasis>
Use the following line in your
<filename>local.conf</filename> file or in your custom
distribution configuration file to enable the security
compiler and linker flags to your build:
compiler and linker flags for your build:
<literallayout class='monospaced'>
require conf/distro/include/security_flags.inc
</literallayout>
@ -5197,15 +5197,19 @@ Gateways via their Web Interfaces</ulink>"</emphasis>
OpenEmbedded build system to make your images more secure:
<itemizedlist>
<listitem><para>
Ensure "debug-tweaks" is not listed with
Ensure "debug-tweaks" is not one of your selected
<ulink url='&YOCTO_DOCS_REF_URL;#var-IMAGE_FEATURES'><filename>IMAGE_FEATURES</filename></ulink>.
The default is to enable "debug-tweaks" by adding it
to
<ulink url='&YOCTO_DOCS_REF_URL;#var-EXTRA_IMAGE_FEATURES'><filename>EXTRA_IMAGE_FEATURES</filename></ulink>
in <filename>local.conf</filename>.
However, you should comment out the variable or be
sure that it does not have "debug-tweaks" before
producing your final image.
When creating a new project, the default is to provide you
with an initial <filename>local.conf</filename> file that
enables this feature using the
<ulink url='&YOCTO_DOCS_REF_URL;#var-EXTRA_IMAGE_FEATURES'><filename>EXTRA_IMAGE_FEATURES</filename></ulink> variable with the line:
<literallayout class='monospaced'>
EXTRA_IMAGE_FEATURES = "debug-tweaks"
</literallayout>
To disable that feature, simply comment out that line in your
<filename>local.conf</filename> file, or
make sure <filename>IMAGE_FEATURES</filename> does not contain
"debug-tweaks" before producing your final image.
Among other things, leaving this in place sets the
root password as blank, which makes logging in for
debugging or inspection easy during