Justin B Rye writes:
> Philip Hands wrote:
>>> Maybe instead of saying "use the system's initial user account to
>>> become root" it should say "allow the system's initial user account
>>> to gain administrative privileges"? I'm not sure. Oh, and we might
>>> even want to mention the word "superuser", or then again we might not.
>>
>> I think Diederik's suggestion of using 'root' for the account and
>> 'super-user' for the privileges might be the way to go.
>
> Looking at what I end up with after another couple of rounds of
> fiddling with it I'm not sure if it's doing quite what you asked for,
> but you still might want it so here it is:
Thanks for that.
> - Some account needs to have system administrative privileges. The
> - password/passphrase for that account should be something that
> - cannot be guessed.
> + Some account needs to be available with administrative super-user
> + privileges. The password/passphrase for that account should be
> + something that cannot be guessed.
> .
> To allow direct password-based access via the 'root' account, you
> can set the password/passphrase for that account here.
> .
> - Alternatively, you can lock root's password
> + Alternatively, you can lock the root account's password
> by leaving this setting empty, and
> instead use the system's initial user account
> (which will be set up in the next step)
> - to become root. This will be enabled for you
> - by adding that user to the 'sudo' group.
> + to gain administrative privileges. This will be enabled for you by
> + adding that initial user to the 'sudo' group.
> .
> Note: what you type here will be hidden (unless you select to show it).
That can be seen here:
https://salsa.debian.org/philh/user-setup/-/commit/a684977100e6746725372f8294f271f890c50430
&
https://openqa.debian.net/tests/240580#step/passwords/1
I think I prefer the previous version better for some reason.
IMO Having the 'password/passphrase' throughout makes it awkward to
read, and actually we've got one place where it still just says
password, and fixing that would make it slightly worse IMO.
How about dropping the passphrase stuff?
https://salsa.debian.org/philh/user-setup/-/commit/7c8dd1bd9d5c8596e7b8f82a19a075e0a5572ed7
&
https://openqa.debian.net/tests/240582#step/passwords/1
which I think is more readable (and is probably fine now that we've
dropped the stuff about password selection which could be read as
suggesting that a password is expected to be a single word).
Cheers, Phil.
--
Philip Hands -- https://hands.com/~phil
signature.asc
Description: PGP signature
