initscripts: Restore locked root account access by using sulogin --force

Andreas Henriksson andreas at
Thu Nov 15 13:42:08 GMT 2018

On Thu, Nov 15, 2018 at 01:07:20PM +0000, Ian Campbell wrote:
> Would it make sense for d-i to take responsibility for adding the `
> --force` when setting up in `sudo`-only mode (i.e. when locking the
> root account)?

Yes (and no?), but it might become "complicated" to actually implement
that since /etc/inittab is *not* marked as a (real) conffile. I'm not
sure if the homegrown way of handling that helps or makes it more
complicated. Atleast d-i would need to handle modifying /etc/inittab
after sysvinit postinst has run AIUI. It might also make it more
complicated to make changes in sysvinit (eg. make it a real conffile in
the future and drop the homegrown stuff) without breaking things.

But most importantly, any changes in d-i will not help all the already
existing installs who rely on the legacy behaviour. An upgrade path
inside sysvinit still needs to handle that.

People volunteering to hack d-i are also hard to come by.....

Andreas Henriksson

More information about the Debian-init-diversity mailing list