Public bug reported:
Binary package hint: ubuntu-vm-builder
Until security update 0.4-0ubuntu0.1 u-v-b was not locking the root account nor
setting a password for it.
Additionally, when using the --ssh parameter, the ssh key is added to the root
account and not to the user account (this was not fixed in the security update.
Verifiability:
- create a VM using u-v-b 0.4 specifying the path to an ssh key
- on the console login prompt, type root
--> you are logged in with no password
- ls .ssh
--> view the authorized key stored there
** Affects: ubuntu-vm-builder (Ubuntu)
Importance: High
Status: Fix Committed
--
[SRU] Root account is not locked by default
https://bugs.launchpad.net/bugs/230291
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
