6.3. Enabling root
Logins¶
Keeping in line with general best practice, SIMP does not allow root
to
login to the system remotely or at local terminals by default.
However, there may be cases where you need to login as root
for perfectly
valid reasons.
6.3.1. Enabling Terminal Logins¶
To allow root
to login at the terminal, you will need to set the
useradd::securetty
Array
to include all tty
devices from which you
wish to allow root
access.
For example, to allow the root
user to login at the first three virtual
consoles and the first serial device, you would place the following in
hiera:
useradd::securetty:
- tty0
- tty1
- tty2
- ttyS0