Gary Gendel wrote: > Hi, > > In the current Indiana, root login (and su) is disabled. To compensate > the initial user is given "root" role. Isn't this like giving users the > keys to the store? All I have to do is "pfsh" (no password) and I've got > full control of just about everything. It seems to me that all we did > was to give the login user root capabilities at the expense of throwing > all security away. At least with the previous model, I had to log in > as root in order to do anything dangerous. >
This is an experiment. You're free to create additional users that don't have that role. How would you like to see this work? > The last thing to note (and I've mentioned this before), is that if something > happens so the boot requests a password to go into "maintenance mode", > you can't log in to fix anything in the current model. Do I need to carry > around my LiveCD everywhere I go with my laptop? > > What is the security model we're shooting for here? > sulogin is supposed to ignore root as a role.... (grabs laptop) .... in fact, when I just tried this (-s on the grub line to boot single user) it works fine. What was the problem you ran into? - Bart -- Bart Smaalders Solaris Kernel Performance [EMAIL PROTECTED] http://blogs.sun.com/barts _______________________________________________ indiana-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/indiana-discuss
