PiSupply / iot-lora-image

RPi SD Card Image for IoT LoRa Range
11 stars 6 forks source link

Generate new account password on boot #49

Closed ryanteck closed 4 years ago

ryanteck commented 4 years ago

We want to generate a password on each boot and then save this to the config file.

Once the user sets up the account we want to then display this to the user after they've setup an account with a warning to make a note of it / print it out and to change the password if they log in via SSH etc.

Once the user has seen the password generate a new one which will not work and save this to the file to prevent abuse and / or maybe write the password to the /boot partition as well allowing a user to access it via USB.

This should make the gateway mostly compliant to the proposed guideline of the COP for Consumer IOT Security of passwords must be unique. However cannot comply to be resettable to any universal setting.