Feature changed by: Karl Cheng (qantas94heavy) Feature #319630, revision 2 Title: Automatic login default only with full disk encryption - openSUSE Distribution: Unconfirmed + openSUSE Distribution: Rejected by Karl Cheng (qantas94heavy) + reject reason: Security rationale given is questionable. Priority Requester: Mandatory Requested by: Arnold Mesper (amesper) Partner organization: openSUSE.org Description: Automatic login is enabled by default. This should only be enabled by default, if the user has selected full disc encryption - otherwise this is a security risk, that novice users might not be aware of. + Discussion: + #1: Karl Cheng (qantas94heavy) (2016-11-18 12:55:21) + If disk is not encrypted and someone has physical access to the + machine, data can still be taken regardless of whether automatic login + is enabled or not. -- openSUSE Feature: https://features.opensuse.org/319630

Feature changed by: Tomáš Chvátal (scarabeus_iv) Feature #319630, revision 4 Title: Automatic login default only with full disk encryption - openSUSE Distribution: New + openSUSE Distribution: Rejected by Tomáš Chvátal (scarabeus_iv) + reject reason: Automatic login does not really affect the computer + security. Especially since the physical access needed for this causes + same issues even if you just simply shut down the machine. + What would make more sense is to request password prompt after + suspend/resume with FDE. Priority Requester: Mandatory Requested by: Arnold Mesper (amesper) Partner organization: openSUSE.org Description: Automatic login is enabled by default. This should only be enabled by default, if the user has selected full disc encryption - otherwise this is a security risk, that novice users might not be aware of. Discussion: #1: Karl Cheng (qantas94heavy) (2016-11-18 12:55:21) If disk is not encrypted and someone has physical access to the machine, data can still be taken regardless of whether automatic login is enabled or not. -- openSUSE Feature: https://features.opensuse.org/319630