Jonathan Andrews wrote:
Disable root graphical logins.
Period.
make it so gdm or kdm or xdm just exit.
hell, you could make the xinitrc script handle it:
if your uid is 0 then you throw up a hate-filled messaged and exit.
EOD.
If you can't flip to a console and take care of the problem there as
root, then you REALLY don't need to be logged into a graphical client to
do it.
Bite me !
Calm down. Being an ass isn't going to make anyone want to listen to your point of view. Just the opposite, in fact.
For the record, just because Fedora by default might ship with the GDM option to disable root logins, nothing stops you from changing that option on your own systems.
You always have the power to choose another distribution. Just because a choice exists doesn't mean it should be encouraged. Everyone has the choice to open up telnet with root login allowed and no password. Doesn't mean we make that the default. For good reason, of course.I want to run some of my boxes as root with X, not to mention the problems this would cause trying to work with some cluster setups and embedded boxes. I have X code then even requires to run UID 0.
Users should have the power to choose, even if you personally think its
a poor choice.
If you have such a security fetish then go play with firewall rules inIf you have such a control fetish then go play with LFS in the corner and leave the Fedora developers to decide how to develop their distribution !
the corner and leave us users to decide how to operate our machines !
Jon
