PATCH: add --loginpause to mingetty
Lubomir Kundrak
lkundrak at redhat.com
Thu Jan 10 13:27:46 UTC 2008
On Wed, 2008-01-09 at 19:20 -0500, Bernardo Innocenti wrote:
> Hello Florian,
>
> the attached patches add an option to pause login until the user hits
> a key.
>
> We need something like it on OLPC because:
>
> - we don't want to set an empty password for either user root or olpc
>
> - at the same time, we want to allow users to login as root at the
> console
>
> - finally, we do not wish to waste memory on shells the user hasn't
> yet used
>
> The security model we are implementing is very different from UNIX: we
> ultimately trust the user at the console, but we don't trust applications
> and we don't want them to gain root privileges using su or sudo with no
> password.
>
> I'm committing these changes to the OLPC-2 branch of mingetty in
> Fedora CVS. Please, let me know you'd like to merge them or
> something similar.
Such things are definitely better upstreamed if possible. Have you tried
contacting upstream?
Thanks,
--
Lubomir Kundrak (Red Hat Security Response Team)
More information about the fedora-devel-list
mailing list