Siduction Forum

Siduction Forum => Installation - Support => Topic started by: SamwiseFilmore on 2017/05/18, 01:19:19

Title: Root Password and Calmares
Post by: SamwiseFilmore on 2017/05/18, 01:19:19
I didn't do a whole lot of looking, but my recent installation of Siduction xfce using calmares seems to have given the root user a password instead of giving my user a password. There are so many reasons why this is a horrible thing to have on any system. I'd really like to see this fixed.
Title: Re: Root Password and Calmares
Post by: piper on 2017/05/18, 02:17:19
Nothing is broke it's by design --edit

You have to give a user name and password and a  root password before you can even install,  as shown in the screenshot

me thinks either you don't remember  ;)

(http://pipersid.net/myshit/linux/images/thumb-user.png) (http://pipersid.net/myshit/linux/images/user.png)





Did you check by accident use the same password for administer account ?
Title: Re: Root Password and Calmares
Post by: melmarker on 2017/05/18, 02:21:43
Omfg - yes, calamares give root a password if you decide that calamares should do so - to make it even better, one could choose to take the same password as the first user - erm, we disabled that one, so it is not the default.

And hey - calamares is mostly python, it is well written and simple to understand. So nothing should stop you start hacking and make it better. Btw, thats what i did - found a bug, fix it and it get merged. And the calamares girls and guys are nice people.

EDIT: Damn, piper, you are to fast for me. 8)

EDIT II: Calamares works fine with sddm - so if one set the two hooks, things becomes really comfortable.
Title: Re: Root Password and Calmares
Post by: piper on 2017/05/18, 02:24:03
Yeah, but probably a beer behind :P
Title: Re: Root Password and Calmares
Post by: SamwiseFilmore on 2017/05/18, 02:56:34
I filled in all four password blanks, and didn't check either of the boxes. I maintain that the installer did not behave the way it should have. I want it to only be possible to get a root shell by doing sudo su root because root shells are not something you ever want to be using.
[/size]To try and solve the problem, I ran [/size]usermod -aG sudo [username][/size]. That successfully added my user as a sudoer (something that should have been done in the installer by default). Then I ran [/size]sudo passwd -d root. Instead of making it impossible to simply [/font][/size]su root, that command just gives me a root shell, without a password required. That's really not something I want. Any insights?[/font]
Title: Re: Root Password and Calmares
Post by: piper on 2017/05/18, 03:58:31
Quote
SamwiseFilmore
That successfully added my user as a sudoer (something that should have been done in the installer by default

Who set that standard ?  This isn't ubuntu

I would never use sudo and it should be a users choice, I am quite happy with su  thank you

You want sudo, it's very easy to do, but, don't force it on others ;)
Title: Re: Root Password and Calmares
Post by: tommy2 on 2017/05/18, 11:28:57
Piper, I agree at least  using "su" one gets a little buffer in the event someone is able to crack your user password they still can't do anything with the system using sudo!  ;)


tommy2
Title: Re: Root Password and Calmares
Post by: piper on 2017/05/18, 13:34:43
Don't get me wrong, I gave sudo just about a  6 months chance, I hate it more now than before I used it.  :)

Title: Re: Root Password and Calmares
Post by: melmarker on 2017/05/18, 13:38:17
Why cracking - given that one has physical access to the machine and can boot from usb password protection for the machine is not existant. Boot from stick, chroot, set the passwords at your will, done. Takes about two minutes.
Title: Re: Root Password and Calmares
Post by: piper on 2017/05/18, 13:45:55
Shit, never that about my wife stealing my porn, that would piss me off, hmm, but then again my grandsons (late teens) probably have better porn than I originally had to begin with, so for me, it's a win/win :P
Title: Re: Root Password and Calmares
Post by: vilde on 2017/05/18, 15:04:23
A agree that using sudo is shit, clumsy to work with bat maybe ok I'm used to have a root password. When administrating computers for others like I do for my mother it's very good to know that she can't mess anything up with her user password.

As for locking something or protect something with a password is how much effort, time and cost you want to spend for protecting. A simple lock or password will keep the casual intruder away but if someone really want to get something  it's very hard to really protect.
Title: Re: Root Password and Calmares
Post by: tommy2 on 2017/05/18, 17:12:40
melmarker, once again I agree with you unless your system has the bios password protected and boot from usb and cdrom turned off. I'm just thankful that I'm the only one getting to my box and don't need the extra security envolved.  :)


tommy2
Title: Re: Root Password and Calmares
Post by: melmarker on 2017/05/18, 18:19:35
@tommy2 - right - and same is true for transparent disc encryption and bios passwords - and the upcoming kernel support for it, if i read the changelog right. That will ease a lot of things, sorry for the users with rotational devices ... 8)
Title: Re: Root Password and Calmares
Post by: tommy2 on 2017/05/18, 18:23:53
@melmarker, as with most things linux only time will tell.  ;D


tommy2