3 ms·

In the meantime, if you'd like to protect your mac, you can set a password for root by going to: System Preferences > Users & Groups > Login Options > Join > O

by dyavuz 9y ago

In the meantime, if you'd like to protect your mac, you can set a password for root by going to: System Preferences > Users & Groups > Login Options > Join > Open Directory Utility > Edit > Change Root Password

cyberferret 9y ago
Standalone iMac here - the 'Join' button is disabled. So is this vulnerability only for Macs on a network? EDIT: My bad - editing was locked on that screen. Got it now... EDIT2: Root user is disabled on mine. Is that enough, given that this bug seems to create a new root user each time? Should I enable root user and set a password rather than leave it disabled?
- mikeash 9y ago
  The bug enables the root user, so leaving it disabled won't save you. Set a password for root, then you should be good to go.
- dyavuz 9y ago
  Mine is currently enabled and since i've set a password, the bug seems to be gone. I can't authenticate by just typing root anymore.
fredsted 9y ago
Alternatively, there's `sudo passwd`.