Darren Reed wrote: > On 15/11/08 12:56 PM, Joep Vesseur wrote: >> ... >> On initial install, the installer asks for a root password. The text >> based installer will warn about empty root passwords and will suggest >> to either set a password or change PASSREQ before rebooting. > > This is likely to trip up a lot of people... > > Why? > > Because people are used to the prompts and will just press "return" > however many number of times it takes to get to the next screen > without reading. It's worked that way it has for *years*... > > And similarly, I'd expect people are going to say "reboot after > install" by default too. > > Putting the text on the screen lets you say "see, your fault for not > reading", but I suspect we can do better and prevent the admin > from booting up a box to which they cannot login to as root... > even if it is their fault. > > So... > > What I'd like to suggest is for the system to refuse to boot into > single user mode, after a fresh install, if > 1) "PASSREQ=yes" and > 2) the root password is empty
That isn't necessary because single user mode could still be entered because of the new functionality from PSARC/2008/321 No Root Login. > and fail into a state where you've got the shell prompt and are > "forced" to either change PASSREQ or set a root password. > By forced I mean you cannot exit that state until one of the two > actions required is taken. > But even that might be unpalatable for jumpstart installs... -- Darren J Moffat
