Torrey McMahon wrote:
> Joseph Kowalski wrote:
>> Bart Smaalders wrote:
>>> How will we insure that there are real administrative users present
>>> in the password file?
>> Are you asserting that installation must create a administrative user
>> (as with Ubuntu, Debian, others) or something else?  If its 
>> "something else",
>> could you elaborate?
>>
>> If an administrative user deletes all administrative users from the 
>> passwd
>> file,... well those are the breaks.  He got exactly what he wanted. :-)
>
> Boot off the live CD, mount the image, etc.
Sounds pretty insecure, but we have this issue already.
> I guess we should add something pretty bulletproof to the docs.
Agreed.  My contact in Ubuntu (who no longer works there) told
me that lots of folk we confused by the "no login" root.  It wasn't
really a problem, but it there was a major "what the ****" response.

It will probably be easier for us as others have already been the
pioneers.

> Perhaps a "fix root access" utility?
:-)

(I hope the smiley is appropriate!)

- jek3


Reply via email to