Set an administrator password and regular user during installation.
Avoid guessable default credentials.
Which policy is appropriate?
Use strong, unique credentials from installation onward and store them safely. Grant administrative access only where needed.
Detailed explanation
Incorrect. A short shared password is easy to guess and compromises every account.
Incorrect. A short shared password is easy to guess and compromises every account.
Correct. Use strong individual credentials and protect them in a secure location.
Correct. Use strong individual credentials and protect them in a secure location.
Incorrect. An installation filename is predictable and not a password.
Incorrect. An installation filename is predictable and not a password.
Incorrect. Empty passwords remove authentication protection.
Incorrect. Empty passwords remove authentication protection.
Try it yourself
An example you can run in a temporary verification environment.
passwd --status "$(id -un)"Expected result
現在利用者のパスワード状態。秘密値は表示しないKey points
- Unique credentials
- Strong password
- Least privilege
Notes
- Environment: shadow-utils系Linux
- Command output formatting can vary slightly by distribution or tool version.
- Run the example in a temporary directory or process when possible.
Foundation review
Read the scope first
Check whether the command acts on the current shell, a new process, an existing process, or a file.
Verify the observable result
Use the supplied command and compare the output with the expected result.