[install-discuss] Install time user creation & root
Darren J Moffat
Darren.Moffat at Sun.COM
Tue Apr 10 08:13:50 PDT 2007
Dave Miner wrote:
> Darren J Moffat wrote:
>> In the brave new installer world I believe there will be the ability
>> during interactive install to create (normal) users.
>>
>
> Yes, there will be. If you look at the current demo of the first
> iteration[1], we're well on the way to including this feature.
>
>> From a security perspective this is a perfect opportunity to turn the
>> root account into an RBAC role so that only that user can become root.
>>
>
> In this first iteration we don't have the cycles to do any more than
> create an account, but we'd definitely like to move in the direction
> you're suggesting later. Timing is the only real issue, and if you or
> someone in security is interested in contributing here, it might go more
> quickly.
What do I need to do to contribute ? The additional functionality I'm
suggested goes a long way to improving the user experience and the
system security and should be a very small amount of code addition to
the installer - particularly if you are already using useradd(1M) to
create the account.
--
Darren J Moffat
More information about the install-discuss
mailing list