Re: Bug#1064617: Passwords should not be changed frequently

[Holger Wansing <hwansing@mailbox.org>]

Hi,

Am 7. März 2024 08:50:25 MEZ schrieb Justin B Rye <justin.byam.rye@gmail.com>:
>Philip Hands wrote:
>>> Maybe instead of saying "use the system's initial user account to
>>> become root" it should say "allow the system's initial user account
>>> to gain administrative privileges"?  I'm not sure.  Oh, and we might
>>> even want to mention the word "superuser", or then again we might not.
>> 
>> I think Diederik's suggestion of using 'root' for the account and
>> 'super-user' for the privileges might be the way to go.
>
>Looking at what I end up with after another couple of rounds of
>fiddling with it I'm not sure if it's doing quite what you asked for,
>but you still might want it so here it is:
>
>-   Some account needs to have system administrative privileges. The
>-   password/passphrase for that account should be something that
>-   cannot be guessed.
>+   Some account needs to be available with administrative super-user
>+   privileges. The password/passphrase for that account should be
>+   something that cannot be guessed.
>    .
>    To allow direct password-based access via the 'root' account, you
>    can set the password/passphrase for that account here.
>    .
>-   Alternatively, you can lock root's password
>+   Alternatively, you can lock the root account's password
>    by leaving this setting empty, and
>    instead use the system's initial user account
>    (which will be set up in the next step)
>-   to become root. This will be enabled for you
>-   by adding that user to the 'sudo' group.
>+   to gain administrative privileges. This will be enabled for you by
>+   adding that initial user to the 'sudo' group.
>    .
>    Note: what you type here will be hidden (unless you select to show it).

All the above looks like an improvement to me.


Holger


-- 
Sent from /e/ OS on Fairphone3