Mailinglist Archive: opensuse-factory (845 mails)

[Vahis <waxborg@xxxxxxxxx>]

Vahis wrote:
> Larry Stotler wrote:
> > On Thu, May 22, 2008 at 11:26 AM, Vahis <waxborg@xxxxxxxxx> wrote:
> >  
> > > I think there was also a tick on "save" or maybe "keep" password
> > > I unticked that at some stage before it started working.
> > >
> > > I have on beta 11 (as I've always had) a different password for root.
> > >     
> >
> > Yes, I don't care for that setup at all.  Having the user and root
> > passwords the same as default is a bad security setup and smells of
> > Ubuntu.  Same goes with the keep password option being checked
> > already.  I can't agree that it's a good default.
> >   
>
> There was already a long thread about this that I kinda started so no 
> more about that, but
> I have always had for my own user during installation (against defaults):
> Receive system mail
> No autologin
>
> Now I need to also check at install:
> Separate password for root
>
> And then later:
> Don't keep password
>
> Maybe all this is in the name of "desktop usability".
> But it sure is going against all *nix principals of security.
>
> One can always say that advanced users do what they want and change 
> the defaults to their liking.
> I'm quite taken because of version 11 but still I think that this 
> autologin stuff with kept root passwords is  _very_ strange to me...
After updating to RC1 I can see that "remember password" is no more 
default when starting YaST.
This is good, thank you :)

Since I haven't made any fresh installs of RC1 I need to ask:
Is same password for root still default in a fresh installation?
I wish it would be an option if it needs to be there.
Maybe it's changed?

If it is still default I keep whining :(
All new users being automatically promoted to root from day one sounds 
bad IMHO I can't help it.

--
Vahis
---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx