In order to guarantee security and privacy for the user, the Passdora system needs to be personalized on first boot. The reason for that is, that every system is cloned from the same operating system image generated from the setup script (#20).
That means that initially every device uses the same basic passwords for SSH, the database, etc. This is a security issue since the default passwords can be found in the open source code. Using these passwords everyone on the network could log into the Passdora system.
To prevent that from happening, the default passwords need to be replaced with randomly generated ones, when the system boots for the first time. These passwords will be displayed to the system administrator once and will then be deleted.
The initialization script does the following things two personalize the system in order to keep it save and secure:
Here is an overview of the initializing process:
Thanks for reading
Jan, for PCSG Developers
