Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Tom Hughes via devel
On 06/12/2021 23:53, Samuel Sieb wrote: On 12/6/21 09:47, Sérgio Basto wrote: On Mon, 2021-12-06 at 12:12 -0500, Matthew Miller wrote: On Mon, Dec 06, 2021 at 11:59:05AM +, Sérgio Basto wrote: Correct me, if I'm wrong, people to avoid put password in every sudo command, modify sudo to not

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Samuel Sieb
On 12/6/21 09:47, Sérgio Basto wrote: On Mon, 2021-12-06 at 12:12 -0500, Matthew Miller wrote: On Mon, Dec 06, 2021 at 11:59:05AM +, Sérgio Basto wrote: Correct me, if I'm wrong, people to avoid put password in every sudo command, modify sudo to not ask password .  And this behavior is a

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Samuel Sieb
On 12/1/21 08:13, mkol...@redhat.com wrote: AFAIK it always added the user to the wheel group. AFAIK there is just one special root account and you can't change its username. You can change the root username. Some people have done that for security purposes. However, it's possible that some

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Sérgio Basto
On Mon, 2021-12-06 at 12:12 -0500, Matthew Miller wrote: > On Mon, Dec 06, 2021 at 11:59:05AM +, Sérgio Basto wrote: > > Correct me, if I'm wrong, people to avoid put password in every > > sudo > > command, modify sudo to not ask password .  And this behavior is a > > big > > hole of security

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Matthew Miller
On Mon, Dec 06, 2021 at 11:59:05AM +, Sérgio Basto wrote: > Correct me, if I'm wrong, people to avoid put password in every sudo > command, modify sudo to not ask password . And this behavior is a big > hole of security , if user is compromised, attacker will have root > access for free. I

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Sérgio Basto
On Wed, 2021-12-01 at 21:40 +, Zbigniew Jędrzejewski-Szmek wrote: > On Wed, Dec 01, 2021 at 09:29:43AM -0600, Brandon Nielsen wrote: > > On 11/29/21 1:33 PM, Ben Cotton wrote: > > > https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda > > > > > > = Users are

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Vladimir Slavik
Thank you, I have added feedback from this discussion to the Change page. https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda#Feedback (This does not mean the discussion is over, just that there was enough to go and edit the page.) Best, VS On Mon, Nov 29, 2021 at

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-06 Thread Vladimir Slavik
Thanks, I have edited the release note on the proposal page. VS On Wed, Dec 1, 2021 at 5:23 PM Jiri Konecny wrote: > > Dne 01. 12. 21 v 16:16 Jonathan Wakely napsal(a): > > On Mon, 29 Nov 2021 at 19:36, Ben Cotton wrote: > >> == Release Notes == > >> > >> In the User spoke, the "Make this user

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-03 Thread Michel Alexandre Salim
On Wed, Dec 01, 2021 at 04:53:20PM -0500, Colin Walters wrote: > > > On Wed, Dec 1, 2021, at 4:34 PM, Chris Adams wrote: > > Once upon a time, Colin Walters said: > >> https://github.com/coreos/fedora-coreos-config/commit/eb74f2ea3e9b453902315539e4f327481162c4f8 > > > > Missed this message

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-02 Thread Michel Alexandre Salim
On Wed, Dec 01, 2021 at 05:19:52PM +0100, Jiri Konecny wrote: > > > Dne 01. 12. 21 v 1:10 Michel Alexandre Salim napsal(a): > > On Tue, Nov 30, 2021 at 10:08:19AM -0600, Michael Catanzaro wrote: > > > On Tue, Nov 30 2021 at 10:57:37 AM -0500, Colin > > > Walters > > > wrote: > > > >

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Colin Walters
On Wed, Dec 1, 2021, at 4:34 PM, Chris Adams wrote: > Once upon a time, Colin Walters said: >> https://github.com/coreos/fedora-coreos-config/commit/eb74f2ea3e9b453902315539e4f327481162c4f8 > > Missed this message earlier... this seems like this should be the > default on pretty much all Fedora

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Zbigniew Jędrzejewski-Szmek
On Wed, Dec 01, 2021 at 09:29:43AM -0600, Brandon Nielsen wrote: > On 11/29/21 1:33 PM, Ben Cotton wrote: > >https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda > > > >= Users are administrators by default in the installer GUI = > > > >== Summary == > > > >The Anaconda

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Chris Adams
Once upon a time, Colin Walters said: > https://github.com/coreos/fedora-coreos-config/commit/eb74f2ea3e9b453902315539e4f327481162c4f8 Missed this message earlier... this seems like this should be the default on pretty much all Fedora setups, with documentation on how to change it if you secure

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Simo Sorce
On Tue, 2021-11-30 at 15:57 -0800, Adam Williamson wrote: > On Tue, 2021-11-30 at 22:39 +, Sérgio Basto wrote: > > On Tue, 2021-11-30 at 16:03 -0500, Matthew Miller wrote: > > > On Tue, Nov 30, 2021 at 11:13:19AM +, Sérgio Basto wrote: > > > > I don't use sudo , and I'm against the use of

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Chris Murphy
On Tue, Nov 30, 2021 at 9:49 AM Chris Adams wrote: > So, not directly related to the proposal, but jumping in here because it > goes with the above statement - the "root should be left locked" setup > is a problem that keeps single-user mode broken. I tried to follow the > Fedora (and other

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Jiri Konecny
Dne 01. 12. 21 v 16:16 Jonathan Wakely napsal(a): On Mon, 29 Nov 2021 at 19:36, Ben Cotton wrote: == Release Notes == In the User spoke, the "Make this user administrator" checkbox is now checked by default. This improves installation experience for users who do not know and need to rely on

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Jiri Konecny
Dne 01. 12. 21 v 1:10 Michel Alexandre Salim napsal(a): On Tue, Nov 30, 2021 at 10:08:19AM -0600, Michael Catanzaro wrote: On Tue, Nov 30 2021 at 10:57:37 AM -0500, Colin Walters wrote: https://github.com/coreos/fedora-coreos-config/commit/eb74f2ea3e9b453902315539e4f327481162c4f8 Should we

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread mkolman
On Wed, 2021-12-01 at 09:29 -0600, Brandon Nielsen wrote: > On 11/29/21 1:33 PM, Ben Cotton wrote: > > https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda > > > > = Users are administrators by default in the installer GUI = > > > > == Summary == > > > > The Anaconda

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Chris Adams
Once upon a time, Adam Williamson said: > Boot with `systemd.debug-shell=1` and there will be a root console > available on tty9 from very early in boot. Not sure if it's early > enough for this specific scenario, but it is for a lot. > > You can also boot to the initramfs environment by booting

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Brandon Nielsen
On 11/29/21 1:33 PM, Ben Cotton wrote: https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda = Users are administrators by default in the installer GUI = == Summary == The Anaconda installer GUI will have the administrative rights checkbox on the User screen ticked by

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Jonathan Wakely
On Mon, 29 Nov 2021 at 19:36, Ben Cotton wrote: > == Release Notes == > > In the User spoke, the "Make this user administrator" checkbox is now > checked by default. This improves installation experience for users > who do not know and need to rely on the default values to guide them. What's the

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Sérgio Basto
On Wed, 2021-12-01 at 14:39 +0100, Lennart Poettering wrote: > On Di, 30.11.21 15:57, Adam Williamson (adamw...@fedoraproject.org) > wrote: > > > On Tue, 2021-11-30 at 22:39 +, Sérgio Basto wrote: > > > On Tue, 2021-11-30 at 16:03 -0500, Matthew Miller wrote: > > > > On Tue, Nov 30, 2021 at

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Lennart Poettering
On Di, 30.11.21 15:57, Adam Williamson (adamw...@fedoraproject.org) wrote: > On Tue, 2021-11-30 at 22:39 +, Sérgio Basto wrote: > > On Tue, 2021-11-30 at 16:03 -0500, Matthew Miller wrote: > > > On Tue, Nov 30, 2021 at 11:13:19AM +, Sérgio Basto wrote: > > > > I don't use sudo , and I'm

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Adam Williamson
On Tue, 2021-11-30 at 08:49 -0600, Chris Adams wrote: > Once upon a time, Ben Cotton said: > > Further, this change of defaults complements the default for root > > account. The redesign of root setup screen in Fedora 35 makes it clear > > that root should be left locked. > > So, not directly

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-12-01 Thread Adam Williamson
On Tue, 2021-11-30 at 16:10 -0800, Michel Alexandre Salim wrote: > On Tue, Nov 30, 2021 at 10:08:19AM -0600, Michael Catanzaro wrote: > > On Tue, Nov 30 2021 at 10:57:37 AM -0500, Colin Walters > > wrote: > > >

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Michel Alexandre Salim
On Tue, Nov 30, 2021 at 10:08:19AM -0600, Michael Catanzaro wrote: > On Tue, Nov 30 2021 at 10:57:37 AM -0500, Colin Walters > wrote: > > https://github.com/coreos/fedora-coreos-config/commit/eb74f2ea3e9b453902315539e4f327481162c4f8 > > Should we be using this on other Fedora variants too...? At

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Adam Williamson
On Tue, 2021-11-30 at 22:39 +, Sérgio Basto wrote: > On Tue, 2021-11-30 at 16:03 -0500, Matthew Miller wrote: > > On Tue, Nov 30, 2021 at 11:13:19AM +, Sérgio Basto wrote: > > > I don't use sudo , and I'm against the use of sudo  , Fedora > > > tradition > > > do things as root . > > > >

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Sérgio Basto
On Tue, 2021-11-30 at 16:03 -0500, Matthew Miller wrote: > On Tue, Nov 30, 2021 at 11:13:19AM +, Sérgio Basto wrote: > > I don't use sudo , and I'm against the use of sudo  , Fedora > > tradition > > do things as root . > > I hope we don't! Doing things with least required privilege is an >

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Matthew Miller
On Tue, Nov 30, 2021 at 11:13:19AM +, Sérgio Basto wrote: > I don't use sudo , and I'm against the use of sudo , Fedora tradition > do things as root . I hope we don't! Doing things with least required privilege is an important security principle, one which was actually pioneered here with

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread stan via devel
On Tue, 30 Nov 2021 12:49:24 +0100 Vít Ondruch wrote: > I think it would be more constructive if you enumerated pros/cons of > sudo to support your argument then the tradition. Not the original poster, but I find that I like the separation of roles into two. When I do things as root, I

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Michael Catanzaro
On Tue, Nov 30 2021 at 10:57:37 AM -0500, Colin Walters wrote: https://github.com/coreos/fedora-coreos-config/commit/eb74f2ea3e9b453902315539e4f327481162c4f8 Should we be using this on other Fedora variants too...? At least for Workstation, where root is always locked?

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Colin Walters
On Tue, Nov 30, 2021, at 9:49 AM, Chris Adams wrote: > Once upon a time, Ben Cotton said: >> Further, this change of defaults complements the default for root >> account. The redesign of root setup screen in Fedora 35 makes it clear >> that root should be left locked. > > So, not directly

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Chris Adams
Once upon a time, Ben Cotton said: > Further, this change of defaults complements the default for root > account. The redesign of root setup screen in Fedora 35 makes it clear > that root should be left locked. So, not directly related to the proposal, but jumping in here because it goes with

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Vít Ondruch
I think it would be more constructive if you enumerated pros/cons of sudo to support your argument then the tradition. Vít Dne 30. 11. 21 v 12:13 Sérgio Basto napsal(a): I don't use sudo , and I'm against the use of sudo , Fedora tradition do things as root . On Mon, 2021-11-29 at 14:33

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Sérgio Basto
I don't use sudo , and I'm against the use of sudo , Fedora tradition do things as root . On Mon, 2021-11-29 at 14:33 -0500, Ben Cotton wrote: > https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda > > = Users are administrators by default in the installer GUI = > >

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-30 Thread Vladimir Slavik
Hi Brandon, this applies to all variants that display the user screen. Looking at the profiles we have, that means Server, KDE, Kinoite, IoT. Where this does *not* apply is Workstation and Silverblue. I believe the anaconda repository has all the relevant profiles, so hopefully that list is

Re: F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-29 Thread Brandon Nielsen
On 11/29/21 1:33 PM, Ben Cotton wrote: https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda = Users are administrators by default in the installer GUI = == Summary == The Anaconda installer GUI will have the administrative rights checkbox on the User screen ticked by

F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-29 Thread Ben Cotton
https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda = Users are administrators by default in the installer GUI = == Summary == The Anaconda installer GUI will have the administrative rights checkbox on the User screen ticked by default. == Owner == * Name:

F36 Change: Users are administrators by default in the installer GUI. (Self-Contained Change proposal)

2021-11-29 Thread Ben Cotton
https://fedoraproject.org/wiki/Changes/Users_are_admins_by_default_in_Anaconda = Users are administrators by default in the installer GUI = == Summary == The Anaconda installer GUI will have the administrative rights checkbox on the User screen ticked by default. == Owner == * Name: