On 16/06/06, Magnus Therning <[EMAIL PROTECTED]> wrote:
On Fri, Jun 16, 2006 at 15:41:11 +0800, Richard wrote:
>On 15/06/06, Joseph Smidt <[EMAIL PROTECTED]> wrote:
>>When I installed Debian I selected to not allow root login thinking that
>>would enable sudo and disable root. But when I logged into gnome it
>>kept asking for the root password to do admin things, so I set a root
>>password and it works.
>> However, I would like to disable root and have it so my sudo password
>>works for all the gnome admin things, like opening synaptic. How do I
>>do that? Thanks.
>> Joseph Smidt
>
>I think you should login as root and run the commands:
>
>usermod -G $USER $GROUPS,adm
A shorter option (sorry couldn't help myself):
# usermod -a adm $USER
Yes you are right
>visudo
>
># Members of the admin group may gain root privileges
>%adm ALL=(ALL) ALL
Rather then using the group that exists to allow users to read log
files[1] it might be better to use the root group or create a special
group for this purpose.
Right again :-)
%admin ALL=(ALL) ALL
should do ... as they have in ubuntu
>And then delete the password from root from your /etc/passwd and
>/etc/shadow files
>=second field
I'd suggest using the -l argument to passwd instead of editing
/etc/passwd and /etc/shadow manually. If you still want to do it
manually you should probably use vipw to do it.
right again :-)
man passwd
... OPTIONS
...
-l, --lock
Lock the named account. This option disables an account
by changing the password to a value which matches no possible
encrypted value.
/M
[1]: http://www.us.debian.org/doc/manuals/reference/ch-tune.en.html#s9.2.3
--
Magnus Therning (OpenPGP: 0xAB4DFBA4)
[EMAIL PROTECTED] Jabber: [EMAIL PROTECTED]
http://therning.org/magnus
Software is not manufactured, it is something you write and publish.
Keep Europe free from software patents, we do not want censorship
by patent law on written works.
Those who would give up Essential Liberty to purchase a little
Temporary Safety, deserve neither Liberty nor Safety
-- Benjamin Franklin, Historical Review of Pennsylvania, 1759
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
