[CHANGE PROPOSAL] The securetty file is empty by default

Chris Adams linux at cmadams.net
Wed Apr 2 17:29:21 UTC 2014


Once upon a time, Jaroslav Reznik <jreznik at redhat.com> said:
> ----- Original Message -----
> > [CHANGE PROPOSAL] The securetty file is empty by default
> > 
> > All the info has been sitting here @
> > https://fedoraproject.org/wiki/Changes/securetty_file_is_empty_by_default
> > since March 20th.
> > 
> > Did I mess something up? Or is there just a backlog?
> 
> Backlog. But for this one, I'd really like to see some discussion
> in advance of the real announcement. So thank you for this email.

I'd be opposed to locking root out of the console login (having spent
today at work tracking down miscellaneous VMs with only a root user
created).

Fedora still allows root SSH logins by default; how is that more secure
than the console?

-- 
Chris Adams <linux at cmadams.net>


More information about the devel mailing list