Bug 11167 - SqueezeOS DHCP tag to enable SSH on device
: SqueezeOS DHCP tag to enable SSH on device
Status: RESOLVED WORKSFORME
Product: SB Touch
Classification: Unclassified
Component: Networking
: unspecified
: Other Other
: P3 normal (vote)
: 8.0.0
Assigned To: Felix Mueller
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2009-02-23 15:20 UTC by Stein David
Modified: 2009-09-08 09:21 UTC (History)
0 users

See Also:
Category: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Stein David 2009-02-23 15:20:17 UTC
Need SqueezeOS based devices to support a DHCP tag that will allow the device to enable SSH allowing for an ethernet only interface to the device.
Comment 1 Blackketter Dean 2009-02-23 21:16:05 UTC
David: can you elaborate on the need?  

This sounds like a reasonable solution, but is a non-trivial security hole (i.e. one well crafted DHCP packet opens this up for anybody to log in.

Would it be acceptable if this only worked when in factory setup mode via the touch screen?  Where is this used on the line?
Comment 2 Stein David 2009-02-23 21:27:09 UTC
This would be a common method of getting to a terminal on the device when it is in plastic and a serial port is not available.  It was a suggestion made by you and Caleb about a month ago. You suggested that I talk to Richard about it. He has not had time to include it.
It is not possible to have operators menu to enable SSH on each device on the production line. Currently for Fab4 I believe that I can have them use an SD card and boot lua off it with SSH enabled.  If all devices moving forward are to have an accessible serial port then this is not needed.
Comment 3 Blackketter Dean 2009-02-23 21:30:47 UTC
Heh, yes the idea was mine.  But like many of my ideas, it may not have been a good one.

So this is for Fab4, right?  I think that the SD card method is safest from a security standpoint.  

For future devices I think it's safe to say that we will either provide USB, SD or a physical serial port.  Would that be sufficient?
Comment 4 Stein David 2009-02-23 21:33:11 UTC
As long as there is a simple method for getting a PC connected to the terminal on the device under test while in plastic.
Comment 5 Blackketter Dean 2009-02-23 21:53:13 UTC
I IM'ed with David and he's good with this solution....