/srv/irclogs.ubuntu.com/2009/03/07/#ubuntu-doc.txt

Rocket2DMnHey guys, https://help.ubuntu.com/community/RootSudo?action=diff&rev1=114&rev2=11501:06
Rocket2DMnDo we want to allow explanations of how to enable the root account, root is disabled by default as part of Ubuntu's security model01:07
FlannelJust ignoring it all together isn't really a healthy policy though.  The comment isn't accurate, though.  Since you can use recovery console/etc.01:07
Rocket2DMnI am against having that info there.  On the forums we don't support enabling the root account for login01:07
FlannelIt's *never* necessary, and we also don't support enabling it in #ubuntu, but I'm not sure trying to censor that info is a good thing.01:07
Rocket2DMnThe thing is, it circumvents Ubuntu's security model01:08
FlannelThat particular person's reasons for adding it are entirely wrong, but that's not a valid reason for removing it/etc.01:08
FlannelYes, but educating the users (so they don't want to enable root) is better than just removing the command.01:08
Rocket2DMnI think we should probably have this discussion on the mailing list, I'll send out an email01:09
Rocket2DMnPerhaps a simple note on the page thta we dont support it is good enough01:09
FlannelIf someone hears (from their friends or whatever) that they should enable root, they'll google and figure out how.01:09
Rocket2DMnthat is true, but it doesnt mean we should be providing that info01:09
FlannelYou can put more than a simple note.  Give it an icon by it, etc.01:09
Rocket2DMnthanks for the feedback Flannel , ill take it into account in my email01:12
Rocket2DMnand you are free to respond :)01:12
FlannelOf course, the same case could be made for arr emm arr eff.  Except that's malicious.  The difference is that this one is a security choice (albeit a rather poor one)  There's plenty of verbage around it explaining that its bad (although some sort of danger icon next to the command couldn't hurt)01:14
FlannelWarning, not danger.01:14
Rocket2DMnthere is already explanation at the top of the page as to why we use sudo01:16
FlannelAnd an explanation under that command as to why its not a good idea (and whats better)01:18
Rocket2DMn"Using the single boot parameter (for example, to repair a broken system) doesn't help much if you intend to use the root option (labeled Drop to root shell prompt) from the Recovery menu, since that option requires entering the root password. (This however seems to have been fixed in the 8.10 release.)"01:18
Rocket2DMnthat is also not true, it only prompts for a password IF you have enabled the root account01:18

Generated by irclog2html.py 2.7 by Marius Gedminas - find it at mg.pov.lt!