Blank root password

[Alejandro Rosales_1]

Can anybody tell me if its 'possible' to have a HPUX 11 system with the root password empty?

I know it can be done, and I know its way unsafe, but I was wondering if there could be some other issues, like a daemon not starting, or something else malfunctioning.

[Michael Tully]

Yes it is possible. This is certainly something you *should never* do. Leaving it blank creates opportunities for unknown security problems.

Only item that I can think of is a background job that may start from either 'cron' or 'at' which requires a password that starts as a different user, and requires 'root'.

[Patrick Wallek]

Sure, it's possible! But it is definitely not recommended. Especially if there are multiple people logging in. I wouldn't want just anyone having root access to any of my machines.

I seriously doubt if any daemons would be affected. Most things like that are started from /sbin/init.d scripts which are run as root at started. Some may do an "su - user -c ..." to start, but no root passwd won't affect that. Others things are started via inetd (/etc/sevices and /etc/inetd.conf), but inetd is a root daemon too, so no problems there.

The only problem I can foresee with not having a root password is someone logging in as root and doing a 'rm -R /*'

That would definitely cause a malfunction.........

[Stefan Schulz]

Hi,

besides the security issue there is no problem. Your system will run perfectly fine ... at least as long as nobody deletes something important.

When i came to my current company i found all HP-UX Systems with a blank root password. So i know that everything runs without a problem. But is was the first thing i changed.

Hope this helps

Regards Stefan

[Joaquin Gil de Vergara]

if you assume all things that people above me say... no problem!

to do it

# passwd -d root

be carefull!

[melvyn burnard]

well one thing I know does NOT work if there is no password set, no matter who the login user is, is ftp.
But I have to say you are asking for problems if you do not set a password for root.