https://bugzilla.novell.com/show_bug.cgi?id=439876
Summary: xdm/kdm Auto-Login configured (even despite explicit
setting to not do that)
Product: openSUSE 11.1
Version: Factory
Platform: Other
OS/Version: Other
Status: NEW
Severity: Normal
Priority: P5 - None
Component: Installation
AssignedTo: bnc-team-screening@forge.provo.novell.com
ReportedBy: com.opensuse@bucksch.org
QAContact: jsrain@novell.com
Found By: ---
Ben Bucksch changed:
What |Removed |Added
----------------------------------------------------------------------------
Flag| |SHIP_STOPPER?
Reproduction:
1. Start KDE LiveCD
2. Install
3. During install, IIRC in the user account creation dialog, click on some
'Settings...' (or similar) button and *un*check 'Automatic login'
4. Boot installed system
Actual result:
Graphical system boots into default user, no prompt for user or password
Expected result:
xdm/kdm prompts for username and password. No way to log in without password.
Severitiy:
Critical for security
----
Default settings:
Aside from the above bug, the default setting in the installer is to do the
automatic login. I also personally think that automatic login should better not
be the default, but off by default and easy to activate, but only with a
message / label about the security implications (zero local security for user
data).
--
Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
