[CHANGE PROPOSAL] The securetty file is empty by default

Matthew Miller mattdm at fedoraproject.org
Wed Apr 9 20:50:31 UTC 2014

On Wed, Apr 09, 2014 at 10:20:36PM +0200, Lennart Poettering wrote:
[technical reasoning snipped]
> Hence: please let's just remove securetty entirely from the default PAM
> stacks. It's annoying, it creates a false sense of security, it's a
> relict of a different time and not compatible with modern device
> management, hotplug, containers, and so on!

That makes sense to me. And unlike tcpwrappers, it's just a runtime config
file change to put back for cases where it's wanted.

Matthew Miller    --   Fedora Project    --    <mattdm at fedoraproject.org>
                                  "Tepid change for the somewhat better!"

More information about the devel mailing list