Restrict root access

[Patrick]

Please review:

lock and expire root account in new Whonix builds

New wiki page:

Safely Use Root Commands

@madaidan

Group root is created by default.

Indeed.

@madaidan

I think we should just leave it as is and not add the user to the root group. I don’t see any reason why they should be able to use su instead of just using sudo .

Reasons for making su work:

• less things broken by default.
• if sudo is broken, one can recover using su? (Otherwise the only option would be to boot into single user / recovery mode?)

Reasons against making su work:

• attack surface su vs sudo? But also not really since one could still use sudo su?