Yi-RTS3903N-RTSPServer icon indicating copy to clipboard operation
Yi-RTS3903N-RTSPServer copied to clipboard

feat: make /etc writable in order to set a root password... and more

Open iMilnb opened this issue 3 years ago • 5 comments

In the camera, /etc is read only and telnet access leaves the root user passwordless, which is a massive security risk. This patch uses the mount --bind capability available in busybox in order to overlay a /etc directory from the sdcard to the root filesystem.

iMilnb avatar Jan 13 '22 21:01 iMilnb

If this method is accepted, I'll provide the documentation in order to add a password to the /etc/passwd file using openssl.

iMilnb avatar Jan 13 '22 21:01 iMilnb

Thanks for the contribution! I'll take a look over the weekend :)

I had considered the same but didn't really like the idea of copying /etc/ to the SD, the mount --bind is very handy.

I've got parts of the original Realtek SDK with RTSP etc and I am hoping to piece together a mount bind of their libs/binaries.

cjj25 avatar Jan 14 '22 11:01 cjj25

@iMilnb, are you still using your camera? I need someone to beta test something for me

cjj25 avatar May 21 '22 12:05 cjj25

@iMilnb, are you still using your camera? I need someone to beta test something for me

I do, and I happen to have received a brand new one last week.

iMilnb avatar May 21 '22 16:05 iMilnb

Thanks for getting back to me.

Awesome news on the new camera, is it the exact same model (Realtek)? How are you finding the RTSP server on the existing camera.

I've managed to put together the right file structure of libraries, configs and binaries to get the Realtek turnkey RTSP server running. I'd be interested to see how it performs for you?

cjj25 avatar May 21 '22 16:05 cjj25