http://bugzilla.novell.com/show_bug.cgi?id=540503 Summary: Boot sequence doesn't require password even if auto-login disabled Classification: openSUSE Product: openSUSE 11.2 Version: Milestone 7 Platform: x86 OS/Version: SuSE Other Status: NEW Severity: Major Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: holy@wustl.edu QAContact: qa@suse.de Found By: --- User-Agent: Mozilla/5.0 (compatible; Konqueror/4.3; Linux) KHTML/4.3.1 (like Gecko) SUSE Fresh install of 11.2 milestone 7, I did the "standard install" from the KDE live CD. When I boot up the computer, it gets all the way through logging in to the one-and-only user's account, without ever asking for a password---meaning, anyone who turns on the computer has access to that user's files. I've checked the KDE Login Manager (kdm config), and neither "Enable password-less logins" nor "Enable auto-login" is checked. I've even tried checking them, hitting "apply," unchecking them, and hitting "apply" without apparent effect. Reproducible: Always Steps to Reproduce: 1. Install from KDE live CD milestone 7, use standard install, create a single user account. 2. Boot up computer, notice that the user is not required to supply a password to log in to his/her account. Actual Results: User gains access to account without supplying password. Expected Results: I expected to be presented with a KDM login screen requiring selection of the user and typing the password. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.