On Wed, Jul 5, 2017 at 3:22 PM, Zbigniew Jędrzejewski-Szmek zbyszek@in.waw.pl wrote:
On Wed, Jul 05, 2017 at 02:36:39PM -0600, Chris Murphy wrote:
On Wed, Jul 5, 2017 at 1:17 PM, Adam Williamson adamwill@fedoraproject.org wrote:
On Tue, 2017-07-04 at 11:21 -0400, Matthew Miller wrote:
On Mon, Jul 03, 2017 at 09:44:31PM -0500, mcatanzaro@gnome.org wrote:
https://fedoraproject.org/wiki/Changes/ReduceInitialSetupRedundancy
I'm definitely in favor of the user account changes. The current setup is confusing for non-experienced users, especially because administrator isn't checked by default. This leads to situations where only a root account is created, and if you log in to Workstation in X or (especially) Wayland as root, many things don't work in non-obvious ways. Like, the GNOME user account panel.
I don't think this is possible. If you only create a root password in anaconda, this is noticed at first boot, and g-i-s runs in its pre-GDM mode and forces you to create a user account before you reach GDM.
There's an unfortunate conflict between wanting a disabled root user by default; and the ensuing difficulty troubleshooting boot problems because systemd demands only root can login when hitting emergency target. An account in wheel is not an option.
We *could* change systemd behaviour here. For example, it could detect that root account is locked and permit any user to log in. Or we could extend this, and somehow only allow users in wheel to log in. Such changes would require some new code and config, but certainly they can done, current behaviour is not set in stone.
Very cool. I for one would really prefer to see the root user disabled by default on all Fedora media. There doesn't seem to be much of an upside for Workstation; and then for Cloud/Atomic Host, and Server, it seems an unnecessary risk. Just login as a user in wheel and sudo -i if you need root.