Re: root account

2022-07-28 Thread Patrick O'Callaghan
On Thu, 2022-07-28 at 12:40 +0930, Tim via users wrote: > On Wed, 2022-07-27 at 21:11 -0300, George N. White III wrote: > > There have been some useful studies comparing different password > > policies.   Very long plain text passphrases without time limits > > are > > now recommended over shorter

Re: root account

2022-07-27 Thread Tim via users
On Wed, 2022-07-27 at 18:17 -0700, Samuel Sieb wrote: > Most sites that want to use your gmail address will redirect you to > google to do the authentication. If not, then don't enter your > password. And any site that stores plain-text passwords should be > banned from the internet. Unfortun

Re: root account

2022-07-27 Thread Tim via users
On Wed, 2022-07-27 at 21:11 -0300, George N. White III wrote: > There have been some useful studies comparing different password > policies. Very long plain text passphrases without time limits are > now recommended over shorter passwords that expire every month or > two. About time! > I have

Re: root account

2022-07-27 Thread Samuel Sieb
On 7/27/22 15:37, Tim via users wrote: Tim: Of course you get banks that only let you set an 8-character password, all in the name of security. Joe Zeff: OK, just use F$ckY0u! Password already in use, please choose another... More joking aside, I'll bet that's a very common one. There's a

Re: root account

2022-07-27 Thread George N. White III
On Wed, Jul 27, 2022 at 7:37 PM Tim via users wrote: > Tim: > >> Of course you get banks that only let you set an 8-character > >> password, all in the name of security. > I've avoided using online bank accounts. When I complain about a withdrawal I didn't make, banks say you must have given yo

Re: root account

2022-07-27 Thread Tim via users
Tim: >> Of course you get banks that only let you set an 8-character >> password, all in the name of security. Joe Zeff: > OK, just use F$ckY0u! Password already in use, please choose another... More joking aside, I'll bet that's a very common one. There's an awful lot of things that want you t

Re: root account

2022-07-27 Thread Patrick O'Callaghan
On Wed, 2022-07-27 at 11:04 -0400, Go Canes wrote: > On Wed, Jul 27, 2022 at 10:05 AM Patrick O'Callaghan > wrote: > > > Check into one of the KeePass variants. > > > > It has nothing to do with the specific password manager. I'm > > talking > > about banks that block the browser from filling in

Re: root account

2022-07-27 Thread Patrick O'Callaghan
On Wed, 2022-07-27 at 23:43 +0930, Tim via users wrote: > Tim: > > > It's just one of those exercises in manifest stupidity and > > > bureaucracy for the sake of it.  Oooh, ooh, it's possible for us > > > to > > > make a rule about resetting passwords, so we will. > > Patrick O'Callaghan: > > Thes

Re: root account

2022-07-27 Thread Joe Zeff
On 7/27/22 08:13, Tim via users wrote: Of course you get banks that only let you set an 8-character password, all in the name of security. OK, just use F$ckY0u! ___ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to us

Re: root account

2022-07-27 Thread Go Canes
On Wed, Jul 27, 2022 at 10:05 AM Patrick O'Callaghan wrote: > > Check into one of the KeePass variants. > > It has nothing to do with the specific password manager. I'm talking > about banks that block the browser from filling in fields on their web > page. I have have one that won't even let me u

Re: root account

2022-07-27 Thread Tim via users
Tim: >> It's just one of those exercises in manifest stupidity and >> bureaucracy for the sake of it. Oooh, ooh, it's possible for us to >> make a rule about resetting passwords, so we will. Patrick O'Callaghan: > These "rules" were formulated in the Olden Days, when people had at > most one or t

Re: root account

2022-07-27 Thread Patrick O'Callaghan
On Wed, 2022-07-27 at 09:48 -0400, Go Canes wrote: > On Wed, Jul 27, 2022 at 5:22 AM Patrick O'Callaghan > wrote: > > [...] Those same banks won't let me use my password manager to > > create a genuinely random password and remember it for me. > > Check into one of the KeePass variants. It has n

Re: root account

2022-07-27 Thread Go Canes
On Wed, Jul 27, 2022 at 5:22 AM Patrick O'Callaghan wrote: > [...] Those same banks won't let me use my password manager to > create a genuinely random password and remember it for me. Check into one of the KeePass variants. ___ users mailing list -- us

Re: root account

2022-07-27 Thread Patrick O'Callaghan
On Wed, 2022-07-27 at 08:22 +0930, Tim via users wrote: > On Mon, 2022-07-25 at 18:50 -0700, Samuel Sieb wrote: > > there's no point in expiring the password to an account > > you're using yourself... > > I see no point in ever expiring any password, unless you're auto- > locking out sacked emplo

Re: root account

2022-07-26 Thread Samuel Sieb
On 7/26/22 15:52, Tim via users wrote: On Mon, 2022-07-25 at 18:50 -0700, Samuel Sieb wrote: there's no point in expiring the password to an account you're using yourself... I see no point in ever expiring any password, unless you're auto- locking out sacked employees because you're too incomp

Re: root account

2022-07-26 Thread Tim via users
On Mon, 2022-07-25 at 18:50 -0700, Samuel Sieb wrote: > there's no point in expiring the password to an account > you're using yourself... I see no point in ever expiring any password, unless you're auto- locking out sacked employees because you're too incompetent to do the job properly when they

Re: root account

2022-07-25 Thread Samuel Sieb
On 7/25/22 18:39, ToddAndMargo via users wrote: On 7/23/22 18:18, stan via users wrote: On Fri, 22 Jul 2022 10:04:37 -0700 ToddAndMargo via users wrote: On 7/22/22 08:12, stan via users wrote: passwd --unlock --expire root Hi Stan, Why did you throw --expire on the above command? -e, --

Re: root account

2022-07-25 Thread ToddAndMargo via users
On 7/23/22 18:18, stan via users wrote: On Fri, 22 Jul 2022 10:04:37 -0700 ToddAndMargo via users wrote: On 7/22/22 08:12, stan via users wrote: passwd --unlock --expire root Hi Stan, Why did you throw --expire on the above command? -e, --expire This is a quick way to expire a pas

Re: root account

2022-07-25 Thread George N. White III
On Sun, Jul 24, 2022 at 6:14 PM Joe Zeff wrote: > On 7/24/22 14:09, Samuel Sieb wrote: > >> > > > > I assume these are 3rd party rpms. If you found something like that in > > Fedora, you should file a bug. > > I doubt it, as I've always tended to stick to the repos. It was years > ago, and I do

Re: root account

2022-07-24 Thread Joe Zeff
On 7/24/22 14:09, Samuel Sieb wrote: I assume these are 3rd party rpms.  If you found something like that in Fedora, you should file a bug. I doubt it, as I've always tended to stick to the repos. It was years ago, and I don't remember which packages they were. __

Re: root account

2022-07-24 Thread Barry
> On 24 Jul 2022, at 09:59, Tim via users wrote: > > Tim via users wrote: >>> It's far more convenient for me to open a terminal and "su -" so I >>> can do a mass of text editing setting up servers, than sudo each >>> thing (*). > > > Samuel Sieb: >> (*) "sudo -i" > > I can't see any tangib

Re: root account

2022-07-24 Thread Samuel Sieb
On 7/24/22 01:58, Tim via users wrote: Tim via users wrote: It's far more convenient for me to open a terminal and "su -" so I can do a mass of text editing setting up servers, than sudo each thing (*). Samuel Sieb: (*) "sudo -i" I can't see any tangible difference between doing "su -" and

Re: root account

2022-07-24 Thread Samuel Sieb
On 7/24/22 11:49, Joe Zeff wrote: On 7/24/22 11:52, George N. White III wrote: "sudo" has configuration to allow specific commands for some group, but as a consequence, has an increased footprint for exploits (via bugs or misconfiguration). There was a time that I removed sudo from my Fedor

Re: root account

2022-07-24 Thread Joe Zeff
On 7/24/22 11:52, George N. White III wrote: "sudo" has configuration to allow specific commands for some group, but as a consequence, has an increased footprint for exploits (via bugs or misconfiguration). There was a time that I removed sudo from my Fedora installation as redundant, as I

Re: root account

2022-07-24 Thread George N. White III
On Sun, Jul 24, 2022 at 5:59 AM Tim via users wrote: > Tim via users wrote: > >> It's far more convenient for me to open a terminal and "su -" so I > >> can do a mass of text editing setting up servers, than sudo each > >> thing (*). > > > Samuel Sieb: > > (*) "sudo -i" > > I can't see any tang

Re: root account

2022-07-24 Thread Joe Zeff
On 7/24/22 02:58, Tim via users wrote: I can't see any tangible difference between doing "su -" and then using the command line as root user to do a pile of things, or starting off by doing "sudo -i" instead (at least not in the Mate terminal). Three less keystrokes. ___

Re: root account

2022-07-24 Thread Patrick O'Callaghan
On Sat, 2022-07-23 at 18:21 -0700, stan via users wrote: > On Fri, 22 Jul 2022 23:04:43 +0100 > Patrick O'Callaghan wrote: >   > > Root is always UID 0. > > Thanks for correcting me.  I *know* this, I see it every day when I > run > ls -n on directories, or top, and yet, my brain somehow went to

Re: root account

2022-07-24 Thread Tim via users
Tim via users wrote: >> It's far more convenient for me to open a terminal and "su -" so I >> can do a mass of text editing setting up servers, than sudo each >> thing (*). Samuel Sieb: > (*) "sudo -i" I can't see any tangible difference between doing "su -" and then using the command line as ro

Re: root account

2022-07-23 Thread Samuel Sieb
On 7/23/22 20:31, Tim via users wrote: I always do. It's far more convenient for me to open a terminal and "su -" so I can do a mass of text editing setting up servers, than sudo each thing (*). I don't do graphical logins as root, so I have no idea if that still works. (*) "sudo -i"

Re: root account

2022-07-23 Thread Joe Zeff
On 7/23/22 21:31, Tim via users wrote: If I was forced to sudo every one of those, the password would end up being shortened to something easier to type. And that's why I always set up Linux with a root password. ___ users mailing list -- users@lists.

Re: root account

2022-07-23 Thread Tim via users
On Sat, 2022-07-23 at 18:18 -0700, stan via users wrote: > The new installs, from what I understand, do not set up a root > account password as part of the install process. I installed Fedora 36 not long ago, Mate spin. There was an opportunity to set up root while the install was going on. I al

Re: root account

2022-07-23 Thread stan via users
On Sat, 23 Jul 2022 18:21:15 -0700 stan wrote: > On Fri, 22 Jul 2022 23:04:43 +0100 > Patrick O'Callaghan wrote: > > > Root is always UID 0. > > Thanks for correcting me. I *know* this, I see it every day when I > run ls -n on directories, or top, and yet, my brain somehow went to 1. > An

Re: root account

2022-07-23 Thread stan via users
On Fri, 22 Jul 2022 23:04:43 +0100 Patrick O'Callaghan wrote: > Root is always UID 0. Thanks for correcting me. I *know* this, I see it every day when I run ls -n on directories, or top, and yet, my brain somehow went to 1. ___ users mailing list --

Re: root account

2022-07-23 Thread stan via users
On Fri, 22 Jul 2022 10:04:37 -0700 ToddAndMargo via users wrote: > On 7/22/22 08:12, stan via users wrote: > > passwd --unlock --expire root > > Hi Stan, > > > Why did you throw --expire on the above command? > > -e, --expire > This is a quick way to expire a password for an > a

Re: root account

2022-07-22 Thread Patrick O'Callaghan
On Fri, 2022-07-22 at 08:12 -0700, stan via users wrote: > On Thu, 21 Jul 2022 12:19:37 -0700 > Samuel Sieb wrote: > > > On 7/21/22 11:18, stan via users wrote: > > > On Thu, 21 Jul 2022 16:48:57 +0200 > > > Patrick Dupre wrote: > > >   > > > > How can I have a root account, which execute the b

Re: root account

2022-07-22 Thread ToddAndMargo via users
On 7/22/22 08:12, stan via users wrote: passwd --unlock --expire root Hi Stan, Why did you throw --expire on the above command? -e, --expire This is a quick way to expire a password for an account. The user will be forced to change the password during the next login attempt.

Re: root account

2022-07-22 Thread stan via users
On Thu, 21 Jul 2022 12:19:37 -0700 Samuel Sieb wrote: > On 7/21/22 11:18, stan via users wrote: > > On Thu, 21 Jul 2022 16:48:57 +0200 > > Patrick Dupre wrote: > > > >> How can I have a root account, which execute the bash files > >> (.bashrc ..) at login ? > > > > I haven't actually tried

Re: root account

2022-07-21 Thread Joe Zeff
On 7/21/22 17:08, Stephen Morris wrote: From previous experience when I was using Fedora in a VM under windows, and I needed the "root" account, Fedora no longer creates the root account at installation and you have to go through a series of steps to actually create it, which I was given by a

Re: root account

2022-07-21 Thread Samuel Sieb
On 7/21/22 16:08, Stephen Morris wrote: From previous experience when I was using Fedora in a VM under windows, and I needed the "root" account, Fedora no longer creates the root account at installation and you have to go through a series of steps to actually create it, which I was given by a

Re: root account

2022-07-21 Thread Stephen Morris
On 22/7/22 05:57, ToddAndMargo via users wrote: On 7/21/22 07:48, Patrick Dupre wrote: Hello, How can I have a root account, which execute the bash files (.bashrc ..) at login ? Thank Not sure what you are asking.  If you want to logon as root, just enter "root" as the user name. If you wan

Re: root account

2022-07-21 Thread ToddAndMargo via users
On 7/21/22 07:48, Patrick Dupre wrote: Hello, How can I have a root account, which execute the bash files (.bashrc ..) at login ? Thank Not sure what you are asking. If you want to logon as root, just enter "root" as the user name. If you want to logon as a regular user and run something au

Re: root account

2022-07-21 Thread Joe Zeff
On 7/21/22 13:19, Samuel Sieb wrote: I don't understand how this is an answer to the question.  There is always a root account, you can't create one.  I think he just wants it to run ".bashrc" at login which it isn't (?) for some reason. It's possible that he's using su, not su -. The fi

Re: root account

2022-07-21 Thread Samuel Sieb
On 7/21/22 11:18, stan via users wrote: On Thu, 21 Jul 2022 16:48:57 +0200 Patrick Dupre wrote: How can I have a root account, which execute the bash files (.bashrc ..) at login ? I haven't actually tried this since all my systems so far have had a root account, but sudo useradd -u 1 -p thro

Re: root account

2022-07-21 Thread Joe Zeff
On 7/21/22 12:18, stan via users wrote: There is a possible security hole here if you are on a system with multiple users, since someone could see that the root account has been created, set to expired, login, and have root access. Unlikely. That's not a problem if you do it right. As soon as

Re: root account

2022-07-21 Thread stan via users
On Thu, 21 Jul 2022 16:48:57 +0200 Patrick Dupre wrote: > How can I have a root account, which execute the bash files > (.bashrc ..) at login ? I haven't actually tried this since all my systems so far have had a root account, but sudo useradd -u 1 -p throwawaypassword root should do the trick.