Welcome, Guest. Please login or register.
Did you miss your activation email?

Author Topic: [EN] Root Password and Calmares  (Read 4929 times)

SamwiseFilmore

  • Guest
[EN] Root Password and Calmares
« on: 2017/05/18, 01:19:19 »
I didn't do a whole lot of looking, but my recent installation of Siduction xfce using calmares seems to have given the root user a password instead of giving my user a password. There are so many reasons why this is a horrible thing to have on any system. I'd really like to see this fixed.

Offline piper

  • User
  • Posts: 1.785
  • we are the priests ... of the temples of syrinx
Re: Root Password and Calmares
« Reply #1 on: 2017/05/18, 02:17:19 »
Nothing is broke it's by design --edit

You have to give a user name and password and a  root password before you can even install,  as shown in the screenshot

me thinks either you don't remember  ;)







Did you check by accident use the same password for administer account ?
« Last Edit: 2017/05/18, 04:00:14 by piper »
Free speech isn't just fucking saying what you want to say, it's also hearing what you don't want to fucking hear

I either give too many fucks or no fucks at all, it's like I cannot find a middle ground for a moderate fuck distribution, it's like what the fuck

Offline melmarker

  • User
  • Posts: 2.799
    • g-com.eu
Re: Root Password and Calmares
« Reply #2 on: 2017/05/18, 02:21:43 »
Omfg - yes, calamares give root a password if you decide that calamares should do so - to make it even better, one could choose to take the same password as the first user - erm, we disabled that one, so it is not the default.

And hey - calamares is mostly python, it is well written and simple to understand. So nothing should stop you start hacking and make it better. Btw, thats what i did - found a bug, fix it and it get merged. And the calamares girls and guys are nice people.

EDIT: Damn, piper, you are to fast for me. 8)

EDIT II: Calamares works fine with sddm - so if one set the two hooks, things becomes really comfortable.
Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. (Benjamin Franklin, November 11, 1755)
Never attribute to malice that which can be adequately explained by stupidity. (Hanlons razor)

Offline piper

  • User
  • Posts: 1.785
  • we are the priests ... of the temples of syrinx
Re: Root Password and Calmares
« Reply #3 on: 2017/05/18, 02:24:03 »
Yeah, but probably a beer behind :P
Free speech isn't just fucking saying what you want to say, it's also hearing what you don't want to fucking hear

I either give too many fucks or no fucks at all, it's like I cannot find a middle ground for a moderate fuck distribution, it's like what the fuck

SamwiseFilmore

  • Guest
Re: Root Password and Calmares
« Reply #4 on: 2017/05/18, 02:56:34 »
I filled in all four password blanks, and didn't check either of the boxes. I maintain that the installer did not behave the way it should have. I want it to only be possible to get a root shell by doing sudo su root because root shells are not something you ever want to be using.
[/size]To try and solve the problem, I ran [/size]usermod -aG sudo [username][/size]. That successfully added my user as a sudoer (something that should have been done in the installer by default). Then I ran [/size]sudo passwd -d root. Instead of making it impossible to simply [/font][/size]su root, that command just gives me a root shell, without a password required. That's really not something I want. Any insights?[/font]

Offline piper

  • User
  • Posts: 1.785
  • we are the priests ... of the temples of syrinx
Re: Root Password and Calmares
« Reply #5 on: 2017/05/18, 03:58:31 »
Quote
SamwiseFilmore
That successfully added my user as a sudoer (something that should have been done in the installer by default

Who set that standard ?  This isn't ubuntu

I would never use sudo and it should be a users choice, I am quite happy with su  thank you

You want sudo, it's very easy to do, but, don't force it on others ;)
Free speech isn't just fucking saying what you want to say, it's also hearing what you don't want to fucking hear

I either give too many fucks or no fucks at all, it's like I cannot find a middle ground for a moderate fuck distribution, it's like what the fuck

Offline tommy2

  • User
  • Posts: 128
Re: Root Password and Calmares
« Reply #6 on: 2017/05/18, 11:28:57 »
Piper, I agree at least  using "su" one gets a little buffer in the event someone is able to crack your user password they still can't do anything with the system using sudo!  ;)


tommy2

Offline piper

  • User
  • Posts: 1.785
  • we are the priests ... of the temples of syrinx
Re: Root Password and Calmares
« Reply #7 on: 2017/05/18, 13:34:43 »
Don't get me wrong, I gave sudo just about a  6 months chance, I hate it more now than before I used it.  :)

Free speech isn't just fucking saying what you want to say, it's also hearing what you don't want to fucking hear

I either give too many fucks or no fucks at all, it's like I cannot find a middle ground for a moderate fuck distribution, it's like what the fuck

Offline melmarker

  • User
  • Posts: 2.799
    • g-com.eu
Re: Root Password and Calmares
« Reply #8 on: 2017/05/18, 13:38:17 »
Why cracking - given that one has physical access to the machine and can boot from usb password protection for the machine is not existant. Boot from stick, chroot, set the passwords at your will, done. Takes about two minutes.
Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. (Benjamin Franklin, November 11, 1755)
Never attribute to malice that which can be adequately explained by stupidity. (Hanlons razor)

Offline piper

  • User
  • Posts: 1.785
  • we are the priests ... of the temples of syrinx
Re: Root Password and Calmares
« Reply #9 on: 2017/05/18, 13:45:55 »
Shit, never that about my wife stealing my porn, that would piss me off, hmm, but then again my grandsons (late teens) probably have better porn than I originally had to begin with, so for me, it's a win/win :P
Free speech isn't just fucking saying what you want to say, it's also hearing what you don't want to fucking hear

I either give too many fucks or no fucks at all, it's like I cannot find a middle ground for a moderate fuck distribution, it's like what the fuck

Offline vilde

  • User
  • Posts: 708
Re: Root Password and Calmares
« Reply #10 on: 2017/05/18, 15:04:23 »
A agree that using sudo is shit, clumsy to work with bat maybe ok I'm used to have a root password. When administrating computers for others like I do for my mother it's very good to know that she can't mess anything up with her user password.

As for locking something or protect something with a password is how much effort, time and cost you want to spend for protecting. A simple lock or password will keep the casual intruder away but if someone really want to get something  it's very hard to really protect.

Offline tommy2

  • User
  • Posts: 128
Re: Root Password and Calmares
« Reply #11 on: 2017/05/18, 17:12:40 »
melmarker, once again I agree with you unless your system has the bios password protected and boot from usb and cdrom turned off. I'm just thankful that I'm the only one getting to my box and don't need the extra security envolved.  :)


tommy2

Offline melmarker

  • User
  • Posts: 2.799
    • g-com.eu
Re: Root Password and Calmares
« Reply #12 on: 2017/05/18, 18:19:35 »
@tommy2 - right - and same is true for transparent disc encryption and bios passwords - and the upcoming kernel support for it, if i read the changelog right. That will ease a lot of things, sorry for the users with rotational devices ... 8)
Those who would give up essential Liberty, to purchase a little temporary Safety, deserve neither Liberty nor Safety. (Benjamin Franklin, November 11, 1755)
Never attribute to malice that which can be adequately explained by stupidity. (Hanlons razor)

Offline tommy2

  • User
  • Posts: 128
Re: Root Password and Calmares
« Reply #13 on: 2017/05/18, 18:23:53 »
@melmarker, as with most things linux only time will tell.  ;D


tommy2