From: me@privacy.invalid   
      
   On Sat, 25 Oct 2025 14:31:36 +0100, Chris Elvidge wrote:   
      
   > Actually what you want is a root account, a primary account (user's   
   > name) with no sudo access but autologin, and a second (secret?) account   
   > with sudo access and no autologin.   
      
   YES! (((-:   
      
   > Note that if you make an account with no sudo access, that account will   
   > not be able to use tools like apt to upgrade the system. This may (or   
   > may not) be a problem down the line.   
      
   That would be a problem; I'd want them to have the latest (security)   
   updates. If I would set up unattended-upgrades (did that for my RPi),   
   would that solve the problem?   
      
   > See visudo (run as root) and /etc/sudoers, /etc/sudoers.d/   
      
   Can you elaborate? (Or give me a link?)   
      
   --   
   s|b   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)