Control: tags -1 + moreinfo

Am 18.10.2015 um 14:25 schrieb Mattia Monga:
> Package: systemd
> Version: 227-2
> Severity: normal
> Tags: patch
> 
> When the root account is locked or its password is not set,
> rescue.service fails to get a root shell. The solution is to call
> sulogin with --force option.

I'm worried that this might open up a security hole.
Do we know how sysvinit behaved in that case?

Should we have debian-installer create a drop-in for rescue.service to
only add --force if during the installation no password was set for root?


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to