From 93957d68ef0f99736ea766c5b56f2be620b18bfa Mon Sep 17 00:00:00 2001 From: George Melikov Date: Tue, 10 Aug 2021 13:05:53 +0300 Subject: [PATCH] Allow empty MANILA_PASSWORD to harden security There is a check for empty value of `DIB_MANILA_USER_PASSWORD` in `elements/manila-ssh/install.d/50-manila-user` already. Just allow to set MANILA_PASSWORD empty. Change-Id: I08ee3e643bb0c6208bda7caadc11f865617163f3 Signed-off-by: George Melikov --- bin/manila-image-create | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/bin/manila-image-create b/bin/manila-image-create index 6a7fd45..e5e7ce2 100755 --- a/bin/manila-image-create +++ b/bin/manila-image-create @@ -14,7 +14,7 @@ DISABLE_IMG_COMPRESSION=${DISABLE_IMG_COMPRESSION:-"no"} # Manila user settings MANILA_USER=${MANILA_USER:-"manila"} -MANILA_PASSWORD=${MANILA_PASSWORD:-"manila"} +MANILA_PASSWORD=${MANILA_PASSWORD-"manila"} MANILA_USER_AUTHORIZED_KEYS="None" # Manila image settings