[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: low-hanging fruit



On Sat, 2007-08-18 at 12:14 -0400, Ray Strode wrote:
> > I would prefer to just disable the root login in gdm.
> It makes sense to do outside of the desktop livecd spin, too.  Root 
> login has never really worked right.  For instance, you can't lock your 
> screen.
> 
> Anyway, building a gdm package into koji now to disable it.

So if we're going to do this, we also should think a bit about the path
how users get created to ensure that people don't end up in a situation
where they've installed and only have a root account but end up at gdm.

1) No user got created in firstboot.  We tell you that you should and we
say "are you sure you want to" if you don't, but it's still quite easy
not to
2) User gets text-mode firstboot (which doesn't ask you to create a
user).  This should only happen if a) you boot into runlevel 3 because
of your install b) text mode installs might still imply text mode
firstboot c) any other cases?
3) firstboot crashed.  Simple answer, firstboot shouldn't crash :-)  But
maybe not that simple.
4) You set up network logins, but your network isn't working/you're
using NetworkManager.  Also maybe a "don't do this" type of thing.  

The first two are the ones that worry me the most.  And I guess the
third, too.  We could be more certain that a user went through and was
presented the "create a user" bit if we moved the user creation (back)
into anaconda.  

That doesn't fix the "I chose not to create a user" case, though.  So
the bigger thing is how do we make it mandatory while still having
things moderately reasonable for the users who choose to set up some
form of network login[1].  Maybe we just punt and say if you're doing
network login only, you're probably using kickstart?  And I guess
there's nothing which says you can't delete the user after you set up
your network login stuff.

Jeremy

[1] In the past, the concern was if you're doing network logins, you
don't want _any_ local accounts to avoid the "local user overrides the
network user" problem.  


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]