RE: [suse-security] kdm - shows all user on login screen
Use kdmconfig
On 18-Jan-01 Andreas Tirok wrote:
I think it is not a good idea to give the people a clue as wich users they might login.
In general, this is not a secret. "cat /etc/passwd" or "ls /home" show this information too.
No, you are not right. I mean users which are logged in may do this, but not those which are about to log on. Those should not have a clue about the users which exist on a system. Or do I miss something here? Thanks Raffy
On Thu, 18 Jan 2001, Raffy wrote:
I think it is not a good idea to give the people a clue as wich users they might login.
In general, this is not a secret. "cat /etc/passwd" or "ls /home" show this information too.
No, you are not right. I mean users which are logged in may do this, but not those which are about to log on. Those should not have a clue about the users which exist on a system. Or do I miss something here?
Oh no, you are right! But supposing, that the initial idea was to hide the other users from a normal local user, I wanted to point out this possibilité, in spite of its triviality ;) In fact, usually only local staff has access to the console, and running xdm remotely is as secure as the network. Bye, Peter -- Peter Münster GMV - Université de Rennes 1 Campus de Beaulieu - Bât. 11B 35042 Rennes Cedex Tel : +33/0 - 2 99 28 67 51 Fax : +33/0 - 2 99 28 16 74 http://w3pm.stormloader.com/
Hi Raffy, Raffy wrote:
Use kdmconfig
On 18-Jan-01 Andreas Tirok wrote:
I think it is not a good idea to give the people a clue as wich users they might login.
In general, this is not a secret. "cat /etc/passwd" or "ls /home" show this information too.
No, you are not right. I mean users which are logged in may do this, but not those which are about to log on. Those should not have a clue about the users which exist on a system. Or do I miss something here?
The initial idea was to hide the other users to any non authorized person, which has no account. For example in rooms crauded by visitors, where also some employees work. The visitors travel through the room an may see a kdm logon screen. They may notice the accounts and try to break in from home or somewhere else. In fact there is a firewall, but I want to prevent this scenario. andy -- ------------------------------- mailto:Andreas.Tirok@beusen.de fon: +49 30 549932-37 fax: +49 30 549932-21
Andreas Tirok:
The initial idea was to hide the other users to any non authorized person, which has no account. (...) They may notice the accounts and try to break in from home or somewhere else. In fact there is a firewall, but I want to prevent this scenario.
andy
Hi, I setup kdm under System/Preferences/Login Manager to show only selected users. Afterwards I edited $KDEDIR/config/kdmrc and changed the line Users=User1,User2 to Users="" The display is wrong afterwards, but I don't care. Peter
participants (4)
-
Andreas Tirok
-
Peter Münster
-
Peter Wiersig
-
Raffy