On Wed, 2008-01-09 at 19:20 -0500, Bernardo Innocenti wrote: > Hello Florian, > > the attached patches add an option to pause login until the user hits > a key. > > We need something like it on OLPC because: > > - we don't want to set an empty password for either user root or olpc > > - at the same time, we want to allow users to login as root at the > console > > - finally, we do not wish to waste memory on shells the user hasn't > yet used > > The security model we are implementing is very different from UNIX: we > ultimately trust the user at the console, but we don't trust applications > and we don't want them to gain root privileges using su or sudo with no > password. > > I'm committing these changes to the OLPC-2 branch of mingetty in > Fedora CVS. Please, let me know you'd like to merge them or > something similar. Such things are definitely better upstreamed if possible. Have you tried contacting upstream? Thanks, -- Lubomir Kundrak (Red Hat Security Response Team) -- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
