Dave Miner wrote: > Darren J Moffat wrote: >> In the brave new installer world I believe there will be the ability >> during interactive install to create (normal) users. >> > > Yes, there will be. If you look at the current demo of the first > iteration[1], we're well on the way to including this feature. > >> From a security perspective this is a perfect opportunity to turn the >> root account into an RBAC role so that only that user can become root. >> > > In this first iteration we don't have the cycles to do any more than > create an account, but we'd definitely like to move in the direction > you're suggesting later. Timing is the only real issue, and if you or > someone in security is interested in contributing here, it might go more > quickly.
What do I need to do to contribute ? The additional functionality I'm suggested goes a long way to improving the user experience and the system security and should be a very small amount of code addition to the installer - particularly if you are already using useradd(1M) to create the account. -- Darren J Moffat
