https://bugzilla.novell.com/show_bug.cgi?id=222668 Summary: login discloses non-existing usernames Product: openSUSE 10.2 Version: Beta 2 Platform: i686 OS/Version: SuSE Other Status: NEW Severity: Critical Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: fmfischer@gmx.net QAContact: qa@suse.de When entering a non-existing username at the login prompt, one does not get the password prompt but: "Login fehlgeschlagen" (login failed) right away. I suggest a linux system should not disclose to someone who is not logged in already whether a username exists on this system. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug, or are watching someone who is.