tree 22252d0af5d9c3025fb2da5903bb3300faef8d25
parent fa1e6bfa93844d9bdd507c666b7f5e9c864c2989
author Samuel Mendoza-Jonas <sam@mendozajonas.com> 1543193263 +1100
committer Samuel Mendoza-Jonas <sam@mendozajonas.com> 1549418608 +1100

petitboot: Enable user separation

Turn on support for unprivileged user accounts in the Petitboot
environment, including setting up a basic non-root user and group.
The implementation also requires using the agetty package rather than
the busybox getty utility, calling the initial pb-console helper on
login rather than directly, and moving some shell init logic from
Petitboot and into a .shrc script.

If no root password is configured in NVRAM or at runtime then this has
no effect aside from some nicer shell behaviour. Once a password is
configured then most actions in Petitboot will require this password and
the shell runs as a normal user.

Signed-off-by: Samuel Mendoza-Jonas <sam@mendozajonas.com>