Red Hat Bugzilla – Bug 962625
CVE-2013-2084 livecd-tools: ignores rootpw --lock (used by appliance-creator)
Last modified: 2015-07-23 10:51:52 EDT
Matthew Miller (email@example.com) reports:
From the kickstart documentation, "rootpw --lock" should result in a locked root password.
In testing (on Fedora 19), it does nothing at all.
`passwd -l root` in %post is a workaround, but shouldn't be necessary.
appliance-creator (in the RPM appliance-tools) depends upon livecd-tools which contains contains the script imgcreate/kickstart.py that that actually handles configuration of the root password.
CVE duplicate of CVE-2013-2069, merged all content/trackers/etc into there.