Accounts

Daily user vs wheel

Keep locked Wheel on the greeter is a larger target (password sniffing, prompt spoofing). The standard is a daily non-wheel user on GNOME/KDE, and wheel only for TTY / run0.

  1. Prefer the first-boot screen

    Before GDM/SDDM, an installer-style dialog asks for a daily username and password. The greeter does not start until you finish or skip. That is the same split as before — we did not let wheel onto the GUI first. Empty name, Cancel, or a 5-minute timeout skips; the lock stays pending. Then: Unwoke setup → Daily user.

  2. Or add one later

    ujust set-admin-split add NAME

    Same outcome: a non-wheel account, greeter locked for wheel. Stock also has ujust create-admin (their helper). Do not create a second wheel user and call it “daily.”

  3. Day to day

    Log into the daily user. When a unit file or ujust needs root, authenticate as wheel via run0 (stock replaced sudo/su/pkexec). That prompt is the feature.

If you must: greeter refuses wheel and you have no daily user — ujust set-admin-split off. You accepted a weaker split. TTY always worked.