[CHANGE PROPOSAL] The securetty file is empty by default
mattdm at fedoraproject.org
Wed Apr 9 20:50:31 UTC 2014
On Wed, Apr 09, 2014 at 10:20:36PM +0200, Lennart Poettering wrote:
[technical reasoning snipped]
> Hence: please let's just remove securetty entirely from the default PAM
> stacks. It's annoying, it creates a false sense of security, it's a
> relict of a different time and not compatible with modern device
> management, hotplug, containers, and so on!
That makes sense to me. And unlike tcpwrappers, it's just a runtime config
file change to put back for cases where it's wanted.
Matthew Miller -- Fedora Project -- <mattdm at fedoraproject.org>
"Tepid change for the somewhat better!"
More information about the devel