PSARC/2010/069 - Solaris GUI Install Users Screen Modification

[Alexander]

Hello. 
Do you think that it is necessary to remove root password entry fields? It's 
very inconvinient - user password and root password matches - so you introduce 
security risk (attacker should only guess 1 password to recieve full system 
access), so on every production system first step will be to change root 
password after install... Why installer can't do it. However, removal of 
Primary Administrator profile from first user is a good thing for the same 
reason.
 
> I am sponsoring this case for Matt Keenan of the
> installer team.
> The case directory contains this proposal.  I have
> set the timer
> for next Thursday, March 4th, 2010.
-- 
This message posted from opensolaris.org