Re: [IPCop-devel] New Installer for 1.5

[Ivan K. <ch...@ya...>]

On Sunday 30 April 2006 05:50, Alan Hourihane wrote:
> On Sat, 2006-04-29 at 18:44 -0400, Ivan Kabaivanov wrote:
> > On Saturday 29 April 2006 15:41, Alan Hourihane wrote:
> > > On Sat, 2006-04-29 at 20:30 +0200, Achim Weber wrote:
> > > > Alan Hourihane wrote:
> > > > > On Sat, 2006-04-29 at 18:20 +0200, Achim Weber wrote:
> > > > >> When I select [OK] to choose automatic patitioning instead of
> > > > >> [fdisk] I get a grub splashscreen but the options are not working.
> > > > >> I get grub error: "Error 15: file not found"
> > > > >> What makes me a bit perplex is the grub-config line:
> > > > >>      "kernel /vmlinuz root=LABEL=/ ro panic=10 acpi=off"
> > > > >> Shouldn't be the LABEL a device name?
> > > > >
> > > > > Whoops. Sorry I missed this part of your email.
> > > > >
> > > > > So, onto this bit...
> > > > >
> > > > > There's something screwy with the grub.conf file. If you press 'e'
> > > > > to edit the boot label and delete the line that says 'savedefault'
> > > > > and hit 'b' to boot. It should be fine.
> > > > >
> > > > > I need to look at why it's not liking savedefault.
> > > > >
> > > > > Alan.
> > > >
> > > > Wow, that did the trick! Thanks Alan.
> > > >
> > > > Now I have to set root PW and setup the network, but not today...
> > >
> > > rootpw defaults to 'ipcop' now.
> > >
> > > Alan.
> >
> > Default root passwords are always a bad idea...
>
> Not really. All off the shelf boxes have default passwords, and you as
> the customer has to change it to ensure your own security.
>
> We can make the 1.5 installer offer to set a root password again in the
> future though.
>
> Alan.

Yes, but we're not talking about off the shelf consumer products here, where 
marketing trumps good reason ("So user-friendly, even your mom can use it!").  
In the context of a firewall with an installer, you must ask the user to set 
such an important piece of information as the root password.  Arguably the 
admin password seems more important than the root password, but we should 
make no assumptions and cut corners in the name of "ease of use."

IvanK.