+++ This bug was initially created as a clone of Bug #135154 +++ From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.1) Gecko/20020922 Description of problem: There's a reasonable policy to avoid using username root logins, but instead create multiple r_* (UID 0) accounts for whoever needs to have root access to the server. This improves accountability and allows each person to change their authentication credentials without having to negotiate with the others. Once that policy is in place, it is natural to disable (usermod -L) the username root account. Unfortunately, sulogin will only accept a password for username root. This makes emergency console logins with alternate root accounts impossible. For that reason, I wrote an alternate implementation of sulogin, available at: http://www.openwall.com/msulogin/ This one will ask for a username, but will only accept root-privileged ones. So far, it's been fully integrated into Owl and ALT Linux. It'd be nice if Red Hat Linux did the same move. There's an RPM spec file for msulogin included in the downloadable tarballs. SysVinit's spec file will need to be modified to not package its local sulogin, but to Require: msulogin. The way it's been integrated into Owl can be seen here: http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/msulogin/msulogin/ and: http://cvsweb.openwall.com/cgi/cvsweb.cgi/Owl/packages/SysVinit/ Version-Release number of selected component (if applicable): SysVinit-2.85-4.2 How reproducible: Always Steps to Reproduce: 1. useradd -u 0 -o -g 0 -m r_admin1 && passwd r_admin1 2. usermod -L root 3. Cause some nasty filesystem breakage, reboot. ;-) Actual Results: Root password prompt upon bootup, with no ability to make use of it since the username root account has been locked. Expected Results: Alternate root username prompt before the root password one. -- Additional comment from shillman on 2005-03-31 16:35 EST -- Internal RFE bug #153011 entered; will be considered for future releases.
Note that implementation of this may change due to SELinux considerations (multiple users with sysadm_r role?)
Package name is now sysvinit in Fedora.
triaged
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.
Sulogin is no longer in sysvinit, reassigning to util-linux.
But probably it can be closed now.
Over-engineering. Closing.