Hi, In the current Indiana, root login (and su) is disabled. To compensate the initial user is given "root" role. Isn't this like giving users the keys to the store? All I have to do is "pfsh" (no password) and I've got full control of just about everything. It seems to me that all we did was to give the login user root capabilities at the expense of throwing all security away. At least with the previous model, I had to log in as root in order to do anything dangerous.
The last thing to note (and I've mentioned this before), is that if something happens so the boot requests a password to go into "maintenance mode", you can't log in to fix anything in the current model. Do I need to carry around my LiveCD everywhere I go with my laptop? What is the security model we're shooting for here? Gary -- This message posted from opensolaris.org _______________________________________________ indiana-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/indiana-discuss
