disable insecure pi user

MarcoPiscopia · Dec 15, 2019 · 89f8f71 · 89f8f71
1 parent 54e5e64
commit 89f8f71
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/setup b/setup
@@ -41,3 +41,10 @@ cd $ONBOARD_ROOT
 bash etc/scripts/platform/debian/setup.sh $ONBOARD_ROOT $ONBOARD_USER
 
 bash modules/openvpn/etc/scripts/platform/debian/setup.sh $ONBOARD_ROOT $ONBOARD_USER
+
+if id -u pi 2> /dev/null; then
+ echo 'Disabling password authentication for user "pi" (Raspberry PI).'
+ echo 'This default user, likely left with default password, is a security risk.'
+ echo "We have the user '$ONBOARD_USER' instead."
+ passwd -d pi
+fi