id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
577	Ask for password upon first boot	misc	ainulindale	"For the moment, upon installation, there is no root password, and this can cause various problem if you plug the device on a computer with usb. 

As this is one of the favorite charging method for charging it, the risk of connecting to a rogue or infected computer is not null.

This would also have prevented the recent problem with dropbear listening on all interface.

The problem is that of course, you cannot distribute a SHR firmware with a preset password set, as it would be as bad as no password.

What about disabling ssh by default, until you set a password on first boot ? 

Since the keyboard can be annoying, we can ask to people to enter a PIN of 6 digits ( so they do not think they are entering their pin code ) and set this as root password, that can still be changed later using the password command as usual.

Another solution is to generate a password on first boot, and print it on screen. And to have a option to set a new one later in shr-settings ( and a way to disable this option, even if a new password can trivially be set using the terminal )"	enhancement	closed	minor		SHR Image	SHR-unstable	fixed