[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1032277: marked as done (installation-reports: Installer too strongly urges users to set root password)



Your message dated Sun, 6 Oct 2024 11:45:50 +0200
with message-id <20241006114550.af5d54f0258586e1684d7a9f@mailbox.org>
and subject line Re: #1032277 installation-reports: Installer too strongly urges users to set root password
has caused the Debian Bug report #1032277,
regarding installation-reports: Installer too strongly urges users to set root password
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1032277: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1032277
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: installation-reports

Boot method: netinst CD
Image version: daily netinst CD as of 02 March 2023
Date: 02 March 2023, now

Machine: GNOME Boxes 43 (virtual machine)
Partitions: <df -Tl will do; the raw partition table is preferred>

Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it

Initial boot:           [O]
Detect network card:    [O]
Configure network:      [O]
Detect media:           [ ]
Load installer modules: [ ]
Clock/timezone setup:   [O]
User/password setup:    [O]
Detect hard drives:     [O]
Partition hard drives:  [ ]
Install base system:    [ ]
Install tasks:          [ ]
Install boot loader:    [ ]
Overall install:        [ ]

Comments/Problems:

Please see the attached screenshot. I believe Debian would be improved
if this page was reworded.

It begins with a strong emphatic statement "You need to set a password
for 'root'

If someone is not reading very carefully, it's easy to not see the
later statement that in fact a password for root is not required and
if this page is left empty, that a user will be able to run admin
commands directly (with sudo or with PolicyKit as implemented by GNOME
> Settings > Printers > Add a printer). Even if someone sees the
statement, they might not understand it.

I personally believe Debian would benefit from Ubuntu's approach where
sudo/admin is enabled for the first user by default. This would be the
opposite of the user experience encouraged by the current wording.

1. Move the root password page after the user name & password pages
2. Change the wording to immediately mention that a root password is
not required. If it is set, then the already enabled user won't be
able to perform admin functions except by logging in as root with this
password.
3. Consider dropping the root password page from the default
installer. I think it's too late (and unnecessary) to do this for
Debian 12, but it's worth considering for Trixie.

Thank you,
Jeremy Bícha

Attachment: debian-root-password-20230302.png
Description: PNG image


--- End Message ---
--- Begin Message ---
The password screens have been overworked some time ago, so I'm closing this
report.

Thanks

-- 
Holger Wansing <hwansing@mailbox.org>
PGP-Fingerprint: 496A C6E8 1442 4B34 8508  3529 59F1 87CA 156E B076

--- End Message ---

Reply to: