[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1032277: installation-reports: Installer too strongly urges users to set root password



Package: installation-reports

Boot method: netinst CD
Image version: daily netinst CD as of 02 March 2023
Date: 02 March 2023, now

Machine: GNOME Boxes 43 (virtual machine)
Partitions: <df -Tl will do; the raw partition table is preferred>

Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it

Initial boot:           [O]
Detect network card:    [O]
Configure network:      [O]
Detect media:           [ ]
Load installer modules: [ ]
Clock/timezone setup:   [O]
User/password setup:    [O]
Detect hard drives:     [O]
Partition hard drives:  [ ]
Install base system:    [ ]
Install tasks:          [ ]
Install boot loader:    [ ]
Overall install:        [ ]

Comments/Problems:

Please see the attached screenshot. I believe Debian would be improved
if this page was reworded.

It begins with a strong emphatic statement "You need to set a password
for 'root'

If someone is not reading very carefully, it's easy to not see the
later statement that in fact a password for root is not required and
if this page is left empty, that a user will be able to run admin
commands directly (with sudo or with PolicyKit as implemented by GNOME
> Settings > Printers > Add a printer). Even if someone sees the
statement, they might not understand it.

I personally believe Debian would benefit from Ubuntu's approach where
sudo/admin is enabled for the first user by default. This would be the
opposite of the user experience encouraged by the current wording.

1. Move the root password page after the user name & password pages
2. Change the wording to immediately mention that a root password is
not required. If it is set, then the already enabled user won't be
able to perform admin functions except by logging in as root with this
password.
3. Consider dropping the root password page from the default
installer. I think it's too late (and unnecessary) to do this for
Debian 12, but it's worth considering for Trixie.

Thank you,
Jeremy Bícha

Attachment: debian-root-password-20230302.png
Description: PNG image


Reply to: