[OpenIndiana-discuss] Root role and root user

Harry Putnam reader at newsguy.com
Wed Dec 8 18:26:47 UTC 2010


I'm sure to get scolded for running as root quite often but it is my
preferred method quite often. It's no doubt not a good idea but I
still bull headedly, prefer it quite often.

I like to be able to ssh to root whenever I please.  It makes lots of
things easier... and since this is a home setup and I am not
responsible for anyone elses data... Nor am I boning up to become a
system administrator (other than my home lan).. It should be up to me.
Not something enforced by my OS.

It probably makes sense to restrict root like that generally since the
OS does go into production uses.

But is there not a way to make root a user rather than a role if I
really want to do that?

On opensolaris one could just edit /etc/user_attr and remove the bit
about root being a role.  I don't have access to the file anymore so
can't recall the exact wording but it is different under oi.  Even
then I still tried a similar edit:

Bits from  /etc/user_atter as installed (wrapped for mail):

  root::::min_label=admin_low;lock_after_retries=no;
  auths=solaris.*,solaris.grant;audit_flags=lo\:no;profiles=All;
  clearance=admin_high;type=role

I removed the last bit `;type=role'

My user's line in /etc/user_attr:
  reader::::roles=root

I removed the root role and replaced it with
  reader::::roles=zfssnap
-------        ---------       ---=---       ---------      -------- 

That edit appeared to make the OS non-bootable (running in a vbox as
guest on windows XP).  Or maybe it was some other bumbling of mine
that caused it... but at any rate it made me chicken to mess with the
file.

I used the livecd to put the file back to it original condition and
things started working again.

It was a bit of work to do that and I'd rather not bumble into it
again. 

Can anyone tell me how to change the setup so that  root is not just a
role but a real user?

Or some other way, if there is one, so that I can ssh to root readily,




More information about the OpenIndiana-discuss mailing list