Open pagnotta opened 7 years ago
+1 on this issue.
Had to do the same to install the plugin. As a possible fic you can have the UI ask for the password on install
Same issue with Youtube plugin install
Aww snap, I'll look into that
Any news on this issue? Is there any place this "volumio" password is hardcoded?
Simple work around: change password back to "volumio"
Yes the password is hardcoded in the volumio2 pluginmanager and many other places :-/
See this issue https://github.com/volumio/Volumio2/issues/1192
Examples: https://github.com/volumio/Volumio2/blob/f160a0f3a61804e759f9475c6694f03ba1928bc8/app/plugins/system_controller/volumio_command_line_client/volumio.sh#L55 https://github.com/volumio/Volumio2/blob/4ade247cea43b22c6f11160bf11804dee9c04e52/app/plugins/system_controller/volumio_command_line_client/commands/kernelsource.sh#L16 https://github.com/volumio/Volumio2/blob/c21785b0877305c02ee26eb8fce7c92443d19e4c/app/pluginmanager.js#L873
One workaround would be disallow the "volumio" user to connect via SSH (sshd_config). Then you can keep your default password and be secure.
Disable SSH via WebUI is useless if you can enable it again without any form of authentication
You know that this is a great idea!!! We could create a different volumio user (say volumiod) to handle all the installations that require sudo privileges...
This issue is still present in the current version of Volumio (2.389). You should not expect users to leave the volumio user password at the default setting. Users may want to change the password for security reasons.
After having changed the default password for the user
volumio
it is not possible to install the spotify plugin anymore. What I get injournalctl
isWhen trying to revert to the old password using
passwd
it is rejected since it is "too simple".So I had to do
sudo passwd volumio
to revert to the old password. Then installation of the spotify plugin worked.