Re: question.....
Re: question.....
- Subject: Re: question.....
- From: Nigel Smith <email@hidden>
- Date: Fri, 21 May 2004 15:41:43 +0100
On 21/5/04 13:39, "John C. Welch" <email@hidden> wrote:
>
On 5/21/04 2:48 AM, "Christopher Nebel" <email@hidden> wrote:
>
>
>> 1) Is there a way to add a password to the root account then disable
>
>> it?
>
>
>
> Mac OS X ships with the root account disabled. Is that not sufficient?
>
>
I get this one...because in its shipping form, anyone with an administrator
>
account can enable the root acount, and give it a password. This has always
>
bugged me, just not enough to really care, since it's not an evil type
>
thing. But part of the initial process of setting up the box should be
>
setting a root password, then re-disabling it. Well, unless disabling it
>
kills the password.
It's worse than that...
*Any* user with an administrator account can, with a bit of know-how, change
the root password to whatever they want -- without knowing the original.
Moral -- don't give anyone you wouldn't trust with root access to a machine
admin access to that machine...
Later,
Nigel
(off to disable every admin account in the building -- BWAH HAH HAH!)
_______________________________________________
applescript-users mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/applescript-users
Do not post admin requests to the list. They will be ignored.