On 1/5/26 4:23 PM, Ryan Eatmon wrote:
This one may not work. This assumes that you have ti-test intstalled (which
not all images do). And without ti-test in the image, then you cannot telnet
to the board during test.
Why would you need to telnet onto a board to check on test if you are
not testing? If you are testing, then you would have ti-test.
Removing this from images that are not specifically meant for use by our
test automation is 100% intentional. Right now anyone can telnet into,
as root, without a password, all of our images. As much as we love to claim
no one should be using these images as a base for their production image,
absolutly every single customer is anyway. Which means we have a huge
security foot-gun here, and customers *will* end up shipping devices with
this massive security issue.
Andrew
On 1/5/2026 4:19 PM, Andrew Davis wrote:
These are only used (and only ever should be used) in testing images.
Move these out of the base distro images and only into images including
the ti-test packagegroup. Move the recipes themselves also over to
meta-arago-test.
Signed-off-by: Andrew Davis <[email protected]>
---
check_yocto_rules.json | 4 ++--
.../recipes-core/packagegroups/packagegroup-arago-base.bb | 2 --
.../initscript-telnetd/initscript-telnetd.bb | 0
.../initscript-telnetd/initscript-telnetd/telnetd | 0
.../recipes-connectivity/systemd-telnetd/systemd-telnetd.bb | 0
.../systemd-telnetd/systemd-telnetd/telnetd.service | 0
meta-arago-test/recipes-core/packagegroups/ti-test.bb | 2 ++
7 files changed, 4 insertions(+), 4 deletions(-)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
(100%)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
(100%)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb (100%)
rename {meta-arago-distro =>
meta-arago-test}/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
(100%)
diff --git a/check_yocto_rules.json b/check_yocto_rules.json
index 7b3e20db..26275421 100644
--- a/check_yocto_rules.json
+++ b/check_yocto_rules.json
@@ -27,8 +27,6 @@
"PV-1" :{
"skip_files" : [
"meta-arago-distro/recipes-connectivity/bt-enable/bt-enable.bb",
-
"meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb",
-
"meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb",
"meta-arago-distro/recipes-core/arago-gpl-notice/arago-gpl-notice.bb",
"meta-arago-distro/recipes-core/meta/meta-toolchain-arago-tisdk-server.bb",
"meta-arago-distro/recipes-core/meta/meta-toolchain-arago-tisdk.bb",
@@ -38,6 +36,8 @@
"meta-arago-extras/recipes-extended/sysrepo/nw-configurator.bb",
"meta-arago-extras/recipes-multimedia/gst-plugins-ti/gstreamer1.0-plugins-ducati_git.bb",
"meta-arago-extras/recipes-multimedia/gst-plugins-ti/gstreamer1.0-plugins-vpe_git.bb"
+
"meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb",
+
"meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb",
]
}
}
diff --git
a/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb
b/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb
index b80697e5..d36b4397 100644
--- a/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb
+++ b/meta-arago-distro/recipes-core/packagegroups/packagegroup-arago-base.bb
@@ -16,8 +16,6 @@ ARAGO_BASE = "\
mtd-utils \
mtd-utils-ubifs \
curl \
- initscript-telnetd \
- systemd-telnetd \
ethtool \
bash \
opkg-bash-completion \
diff --git
a/meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
b/meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
rename to
meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd.bb
diff --git
a/meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
b/meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
rename to
meta-arago-test/recipes-connectivity/initscript-telnetd/initscript-telnetd/telnetd
diff --git
a/meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb
b/meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb
rename to
meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd.bb
diff --git
a/meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
b/meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
similarity index 100%
rename from
meta-arago-distro/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
rename to
meta-arago-test/recipes-connectivity/systemd-telnetd/systemd-telnetd/telnetd.service
diff --git a/meta-arago-test/recipes-core/packagegroups/ti-test.bb
b/meta-arago-test/recipes-core/packagegroups/ti-test.bb
index 22957218..ebac81c2 100644
--- a/meta-arago-test/recipes-core/packagegroups/ti-test.bb
+++ b/meta-arago-test/recipes-core/packagegroups/ti-test.bb
@@ -22,6 +22,7 @@ TI_TEST_BASE = "\
hwspinlocktest \
hdparm \
i2c-tools \
+ initscript-telnetd \
iozone3 \
iproute2-tc \
iproute2-devlink \
@@ -57,6 +58,7 @@ TI_TEST_BASE = "\
stress \
stress-ng \
strongswan \
+ systemd-telnetd \
tcpdump \
v4l-utils \
xdp-tools-arago \
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#16929):
https://lists.yoctoproject.org/g/meta-arago/message/16929
Mute This Topic: https://lists.yoctoproject.org/mt/117096038/21656
Group Owner: [email protected]
Unsubscribe: https://lists.yoctoproject.org/g/meta-arago/unsub
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-
