Bug #15358
UserData default is insecure
Fixed in Releases:
Found in Releases:
Description
The Cloud init template creates an admin account with a password, which is against standard best practices in cloud providers.
Read the section under passwd: http://cloudinit.readthedocs.io/en/latest/topics/examples.html#including-users-and-groups
Remember user data can be seen by anyone, for example EC2 stores this with the instance for later editing/reference.
Associated revisions
History
#1
Updated by The Foreman Bot about 6 years ago
- Status changed from New to Ready For Testing
- Pull request https://github.com/theforeman/community-templates/pull/281 added
#2
Updated by Anonymous about 6 years ago
- Status changed from Ready For Testing to Closed
- % Done changed from 0 to 100
Applied in changeset community-templates|002720b2f10b0d116d7b5ccfe7b6d9b91c831472.
#3
Updated by Dominic Cleal about 6 years ago
- Legacy Backlogs Release (now unused) set to 160
Fixes #15358 - disable password auth when SSH keys provided
Closes GH-281