Disabled root - by default; up2date more annoying

[Matthew Miller]

On Mon, Feb 09, 2004 at 05:01:25AM +1100, Colin Charles wrote:
> 1. Follow the Mac OS X style of disabling a root login by default.
> Enable sudo, and the first account that gets created thru the firstboot,
> gets sudo privileges. Thoughts?

For BU Linux, we configure the default X session for root to be a
stripped-down environment: metacity with fspanel, with the GUI user
configuration tool running and some text explaining about creating a user
account. (If someone logs in at the text console, we assume they know what
they're doing. Likewise, if they *need* GUI access as root, selecting GNOME
or KDE explicitly still works.)

We also have modified the GUI tool [1] to add a simple checkbox to add
'wheel' group membership, and set up sudo ALL for members of that group.

And beyond that, we use this patch:

<https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=86188>

and updated /etc/security/console.apps files for the various config tools so
that they too work for users of the wheel group with sudo-like auth-as-self
instead of requiring the root password.


[1] this is so far for RHL 9 -- versions for Fedora Core 2 coming soon. The
usermode patch has been updated to the latest Fedora devel package, though.


-- 
Matthew Miller           mattdm at mattdm.org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>