Joseph Nuthalapati ba9af6ddff

firstboot: Prompt for secret during firstboot welcome ...

- A freshly installed FreedomBox can be hijacked by a third party and an admin
  account can be created which can be used to inject malware or simply take over
  the instance. Password protecting the firstboot step is a good way to avoid
  this. A secret will be displayed to the user as soon as the Plinth package
  is installed, which they have to enter during firstboot welcome step. Also,
  writing this to a file in plinth's home in case the user loses it.
- This protection is not applicable for images built by freedom-maker and for
  Amazon Machine Images.

Signed-off-by: Joseph Nuthalapati <njoseph@thoughtworks.com>
Reviewed-by: James Valleroy <jvalleroy@mailbox.org>

2018-07-04 20:22:54 -04:00

..

locale

Translated using Weblate (Hindi)

2018-07-04 16:18:46 +02:00

migrations

locale: Update profile model

2018-02-21 21:08:11 +01:00

modules

firstboot: Prompt for secret during firstboot welcome

2018-07-04 20:22:54 -04:00

templates

packages: Button to refresh package lists

2018-07-02 19:30:13 -04:00

templatetags

…

tests

Adapt test and documentation to changes of '--develop' option

2018-06-18 19:27:31 -04:00

__init__.py

Release v0.33.1 to unstable

2018-07-04 10:33:48 -04:00

__main__.py

Merge ./run --debug into --develop option

2018-06-18 19:27:38 -04:00

action_utils.py

apache: Only regenerate snake oil cert when needed

2018-03-24 20:12:51 -04:00

actions.py

Don't use async for method parameters

2018-02-24 19:14:13 +01:00

axes_app_config.py

…

cfg.py

Merge ./run --debug into --develop option

2018-06-18 19:27:38 -04:00

clients.py

…

context_processors.py

…

errors.py

…

forms.py

users: Replace disabled with readonly for admin group checkbox

2018-07-04 08:28:55 -04:00

frontpage.py

Add a way to refine shortcuts

2018-06-21 18:53:45 +05:30

kvstore.py

…

menu.py

Apply new card based design

2018-06-18 20:18:37 +05:30

middleware.py

middleware: Skip 'installed' message for essential apps

2018-04-09 19:10:49 +05:30

models.py

locale: Automatically save profile when user model is saved

2018-02-21 21:08:27 +01:00

module_loader.py

Merge ./run --debug into --develop option

2018-06-18 19:27:38 -04:00

network.py

Remove unused imports and variables

2018-06-18 19:27:40 -04:00

package.py

packages: Button to refresh package lists

2018-07-02 19:30:13 -04:00

service.py

firewall: Display information that a service is internal only

2018-06-21 18:01:53 +05:30

setup.py

package: Add option to skip recommends

2018-07-02 19:00:24 -04:00

signals.py

…

translation.py

…

urls.py

…

utils.py

apps: Fix app names and short descriptions not being translated

2018-04-08 10:57:19 -04:00

views.py

packages: Button to refresh package lists

2018-07-02 19:30:13 -04:00