[OpenIndiana-discuss] Root role and root user

Roy Sigurd Karlsbakk roy at karlsbakk.net
Wed Dec 8 19:02:39 UTC 2010


# usermod -K type=normal root

----- Original Message -----
> I'm sure to get scolded for running as root quite often but it is my
> preferred method quite often. It's no doubt not a good idea but I
> still bull headedly, prefer it quite often.
> 
> I like to be able to ssh to root whenever I please. It makes lots of
> things easier... and since this is a home setup and I am not
> responsible for anyone elses data... Nor am I boning up to become a
> system administrator (other than my home lan).. It should be up to me.
> Not something enforced by my OS.
> 
> It probably makes sense to restrict root like that generally since the
> OS does go into production uses.
> 
> But is there not a way to make root a user rather than a role if I
> really want to do that?
> 
> On opensolaris one could just edit /etc/user_attr and remove the bit
> about root being a role. I don't have access to the file anymore so
> can't recall the exact wording but it is different under oi. Even
> then I still tried a similar edit:
> 
> Bits from /etc/user_atter as installed (wrapped for mail):
> 
> root::::min_label=admin_low;lock_after_retries=no;
> auths=solaris.*,solaris.grant;audit_flags=lo\:no;profiles=All;
> clearance=admin_high;type=role
> 
> I removed the last bit `;type=role'
> 
> My user's line in /etc/user_attr:
> reader::::roles=root
> 
> I removed the root role and replaced it with
> reader::::roles=zfssnap
> ------- --------- ---=--- --------- --------
> 
> That edit appeared to make the OS non-bootable (running in a vbox as
> guest on windows XP). Or maybe it was some other bumbling of mine
> that caused it... but at any rate it made me chicken to mess with the
> file.
> 
> I used the livecd to put the file back to it original condition and
> things started working again.
> 
> It was a bit of work to do that and I'd rather not bumble into it
> again.
> 
> Can anyone tell me how to change the setup so that root is not just a
> role but a real user?
> 
> Or some other way, if there is one, so that I can ssh to root readily,
> 
> 
> _______________________________________________
> OpenIndiana-discuss mailing list
> OpenIndiana-discuss at openindiana.org
> http://openindiana.org/mailman/listinfo/openindiana-discuss

-- 
Vennlige hilsener / Best regards

roy
--
Roy Sigurd Karlsbakk
(+47) 97542685
roy at karlsbakk.net
http://blogg.karlsbakk.net/
--
I all pedagogikk er det essensielt at pensum presenteres intelligibelt. Det er et elementært imperativ for alle pedagoger å unngå eksessiv anvendelse av idiomer med fremmed opprinnelse. I de fleste tilfeller eksisterer adekvate og relevante synonymer på norsk.



More information about the OpenIndiana-discuss mailing list