[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: Root Logins in X...



Warren Togami wrote:
Let us step back and consider the actual goal of preventing root logins.

We want to stop people from logging in as root on their X desktop
because it is almost always done out of laziness.  We want to discourage
these lazy users from logging in as root and using desktop applications,
which can be a dangerous thing.

The only legitimate reason to allow root login is disaster recovery.
The case where /home filesystem is full and logins fail, or /home is
remote and inaccessible are cases where graphical non-root logins can fail.

So why don't we make root logins from GDM a stripped down desktop with
only a terminal and a menu with only configuration tools?  This desktop
should be ugly and with a very obvious note explaining why they
shouldn't be logged in as root.

Benefits?
- Educates the users.
- Prevents future stupid flame wars.

+1. At one point I had my box set up that way (not sure if it still is, or not); root login would get... twm + xterm. Why? Because I would use it when things went wrong, and because generally I can fix it with a console, or /limited/ use of X apps. And because running xterm in X is still light-years better than a text-mode console. (Yes, even if KMS worked on my system - which it doesn't - because I can take advantage of all three screens I have hooked up with multiple xterms open at a time.)

Personally, I'd even suggest the same setup, twm + xterm. It certainly qualifies as 'ugly' ;-).

Oh... Michal's right about one thing, though; xclock (in text mode, please!) would be a nice addition if we set this up as default.

--
Matthew
Please do not quote my e-mail address unobfuscated in message bodies.
--
Who let the hippos out?


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]