Matthew Miller (mattdm) reports: From the kickstart documentation, "rootpw --lock" should result in a locked root password. In testing (on Fedora 19), it does nothing at all. `passwd -l root` in %post is a workaround, but shouldn't be necessary.
appliance-creator (in the RPM appliance-tools) depends upon livecd-tools which contains contains the script imgcreate/kickstart.py that that actually handles configuration of the root password.
CVE duplicate of CVE-2013-2069, merged all content/trackers/etc into there.