> On Tuesday, 25 November 2014 8:53 PM, Kevin Fenzi wrote: > > On Tue, 25 Nov 2014 09:56:59 -0500 > Simo Sorce wrote: > >> We can install machine w/o user accounts, removing the ability to log >> in as root via ssh means those machines will not be accessible. > > This has been the reason this hasn't been changed the last few times > someone proposed to change it. > > I don't know how many folks do installs with no user config, but it's > definitely possible right now and that could mean they wouldn't be able > to reach their instance. We could of course change that so creating a > new user is forced, but I'm really not sure it's that much advantage. > >> If you want to remove root access that should be conditionally done at >> firstboot only if a user account was created. > > This seems a more reasonable place to look to change this, I agree.
True, this concern has been raised before. We need to ensure that user creates at least one non-root user account; firstboot is just the right place to ensure that. --- Regards -Prasad http://feedmug.com -- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
