#5680 HIGH Update.: G1G1 laptops are shipping with "security" enabled

[Zarro Boogs per Child]

#5680: G1G1 laptops are shipping with "security" enabled
-----------------------+----------------------------------------------------
  Reporter:  gnu       |       Owner:  jg                      
      Type:  defect    |      Status:  new                     
  Priority:  high      |   Milestone:  Update.1                
 Component:  security  |     Version:                          
Resolution:            |    Keywords:  firmware, security, G1G1
  Verified:  0         |    Blocking:                          
 Blockedby:            |  
-----------------------+----------------------------------------------------

Comment(by gnu):

 As part of 1) "streamline getting developer keys", installation of the key
 on the laptop should be automated.  Currently it requires WRITING DOWN a
 long wget command line, including a long random URL, then switching to a
 root console, then typing it in (without errors) and running it.  Then
 rebooting, then interrupting the reboot and typing "disable-security",
 which tells you to do it again after the reboot, then interrupting a
 second reboot and typing "disable-security".

 The installation of the key in the NAND filesystem should happen in the
 web browser, when the key is available from Central Services.  We may be
 stuck with the double reboot -- or perhaps, on its way down for the first
 reboot, OFW can notice the devkey in NAND and avoid locking the SPI flash.

 At the very least, we could get copy/paste working in the $&#&@# web
 browser and terminal emulator, so the user could avoid finding a pencil
 and paper (and learning to write, for the children involved) to copy a
 command from Activity A to Activity B!

-- 
Ticket URL: <http://dev.laptop.org/ticket/5680#comment:9>
One Laptop Per Child <http://dev.laptop.org>
OLPC bug tracking system