Trouble Logging In as Root

Derek Broughton news at pointerstop.ca
Mon Nov 10 18:45:24 UTC 2008


Mark Haney wrote:

> Derek Broughton wrote:
>> Mark Haney wrote:
>> 
>>> CLIFFORD ILKAY wrote:
>>>
>>>>> Am I missing something really obvious here? How can setup my computer
>>>>> so that I can login as root? I have all my files backed up so if
>>>>> another fresh install is required that is certainly as possibility.
>>>> Ignore the advice to set a root password.
>>> Okay, I came rather late to the party but I would like to say a couple
>>> of things here.  First and foremost.  NEVER leave root without a
>>> password.  PERIOD.
>> 
>> As somebody else pointed out, it isn't strictly without a password.
> 
> True, but locked is only good with a hard to guess password with it.

Still wrong.  It isn't a hard-to-guess password - it's an impossible-to-use password.

> See my previous post.
>> 
>>> This is not only probably the biggest security hole
>>> ever, it's just plain wrong.  Root is (in the phrasing of Ric Flair)
>>> 'THE MAN'.  It can do everything.  Anyone leaving root exposed runs a
>>> big risk.
>> 
>> Root is not exposed in a default Ubuntu system.
> 
> Of course it's exposed, with the primary user having root access it's
> exposed.

Absolutely no more so than in your concept - and imo less.

> Look, the issue here is with the primary user having sudo
> access.  Even that exposes root.  And root access.  Users by themselves
> are typically lazy with passwords, that makes it paramount that root be
> locked down as tightly as possible.

Right.  BY NOT HAVING A WORKING ROOT ACCOUNT
-- 
derek





More information about the ubuntu-users mailing list