undefined | Better HN

0 pointsmartinp8y ago0 comments

This support article explains how to disable the root user: https://support.apple.com/en-us/HT204012

0 comments

Do note that this doesn't fix the problem. The system (at least High Sierra) will happily re-enable the user for every attempt at logging in.

Just change the root password once the account is enabled; this fixes the hole.

sudo passwd -u root

It's sad we have to do this, though.

If you disable the root user using `dsenableroot -d` from the Terminal, this seems to disable the account in a way that leaves its password intact.

The bug isn't in the disabling, it's in the auto-enabling on attempt.

j / k navigate · click thread line to collapse

Do note that this doesn't fix the problem. The system (at least High Sierra) will happily re-enable the user for every attempt at logging in.

Just change the root password once the account is enabled; this fixes the hole.

sudo passwd -u root

It's sad we have to do this, though.

If you disable the root user using `dsenableroot -d` from the Terminal, this seems to disable the account in a way that leaves its password intact.

The bug isn't in the disabling, it's in the auto-enabling on attempt.

j / k navigate · click thread line to collapse