Nasty bug in Devuan creates blank root password when you actually want to disable root account

[Red Squirrel]

GitHub - nicolascolla/WTF-Devuan

Contribute to nicolascolla/WTF-Devuan development by creating an account on GitHub.

github.com

Whoops! That can be pretty nasty if you have a web facing machine where you disabled the root account during install, or at least, you thought that's what you were doing!

I just checked my systems and I seem to be ok. I only have one that faces the internet and passwords are disabled on that one, only key pair auth. When I su locally I also need to actually enter the password.