FreeLinX base 1.0.13

FreeLinX base 1.0.13 — security fix for v1.0.11.1

If you installed FreeLinX from v1.0.11.1, reinstall from this image. On v1.0.11.1 every console of an installed system (tty1–tty3 and the serial line) had a root shell without asking for a password, so the root password set by xsetup protected nothing.

freelinx-base-x86_64.iso — 279 MB, BIOS and UEFI
sha256 aac5824f7fa86cd2f0e74edfc3a470408223a6eb9ee14bf73744d3c3c8a703cb

What changed

• An installed system now asks for a login on every console (getty + login), as 1.0.8–1.0.11 did. The live medium still opens a root shell, as before.
• If getty or login is missing, the console stays closed rather than giving a shell. Use "Rescue shell" in the boot menu to repair the system.
• Otherwise the image has the same files as v1.0.11.1: the 1.0.12 installer, where root password and user creation work, and the new boot text.

Tested

test-xsetup-qemu.sh runs all 13 xsetup steps, boots the installed disk without the medium, logs in as the user and as root, checks hostname, time zone, groups, shell, sshd, ntpd, UUID pins and the framebuffer console, then reboots and checks persistence.

• BIOS: 29 passed, 0 failed
• UEFI (OVMF): 29 passed, 0 failed

check-nognu: 0 failing. Not tested on real hardware.