[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

RFC: warn user about first accounts privs



I'm not sure what changes are considered acceptable at this point in
d-i, but I wanted to float this one. I discovered while researching
#404927 that the first user added at install time is also added to
various system groups. Though I think its reasonable, I personally did
not expect it and thought a warning was in order.

Please let me know if this is a reasonable thing to commit.

Index: debian/user-setup-udeb.templates
===================================================================
--- debian/user-setup-udeb.templates	(revision 44108)
+++ debian/user-setup-udeb.templates	(working copy)
@@ -52,7 +52,11 @@
  result in disaster. You should create a normal user account to use for
  those day-to-day tasks.
  .
- Note that you may create it later (as well as any additional account) by
+ Note that this user will automatically be added to various system groups.
+ These groups provide access to devices often used in a desktop environment
+ (removeable media, sound cards, etc).
+ .
+ You may create it later (as well as any additional account) by
  typing 'adduser <username>' as root, where <username> is an username,
  like 'imurdock' or 'rms'.
 
Index: debian/changelog
===================================================================
--- debian/changelog	(revision 44108)
+++ debian/changelog	(working copy)
@@ -1,10 +1,16 @@
 user-setup (1.9) UNRELEASED; urgency=low
 
+  [ Colin Watson ]
   * Refuse to apply an empty root password. I don't think this can happen,
     but it's a useful sanity check.
 
- -- Colin Watson <cjwatson@debian.org>  Tue, 19 Dec 2006 17:29:38 +0000
+  [ dann frazier ]
+  * Explicitly note that the first user gets added to a number of system
+    groups by default. This should help reduce the severity of bugs like
+    #404927.
 
+ -- dann frazier <dannf@debian.org>  Wed, 10 Jan 2007 17:58:04 -0700
+
 user-setup (1.8) unstable; urgency=low
 
   [ Joey Hess ]


-- 
dann frazier



Reply to: