http://bugzilla.opensuse.org/show_bug.cgi?id=1028546 Bug ID: 1028546 Summary: After install from live CD user "livecd-user" is existing in installed system Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: SUSE Other Status: NEW Severity: Normal Priority: P5 - None Component: Basesystem Assignee: bnc-team-screening@forge.provo.novell.com Reporter: fossa-artem@mail.ru QA Contact: qa-bugs@suse.de Found By: --- Blocker: --- Hi, I've found behaviour, which can pose a security risk (unwanted user is being created after installation). How to reproduce: 1) Download Thumbleweed KDE Live-CD; 2) Boot into it; 3) Install system from it; 4) Boot into installed system. What expected? No strange users in system. What actually happens? User "livecd-user" is existing in newly-installed system. This user was necessary during the installation stage and have empty password, but this user is completely unwanted in newly-installed system. I've didn't checked if this user have empty password in newly-installed system, but if yes, than it's a security problem. Regards, Artyom Vetrov. -- You are receiving this mail because: You are on the CC list for the bug.