* On the CD or on a newly installed system, create the root account

with an empty password, rather than with a hashed empty password.
  The latter is a security risk, because it allows remote root logins
  if a user enables sshd before setting a proper root password.
* Allow empty passwords for login and slim, but nothing else.

svn path=/nixos/trunk/; revision=17833

modules/system/activation/activation-script.nix

@@ -112,7 +112,6 @@ let
           # (bootstrap problem!).
           echo "root:x:0:0:System administrator:$rootHome:${config.users.defaultUserShell}" >> /etc/passwd
           echo "root::::::::" >> /etc/shadow
-          echo | passwd --stdin root
       fi
     '' [
       "defaultPath" # path to touch & passwd