F21 System Wide Change: The securetty file is empty by default

Michel Alexandre Salim salimma at fedoraproject.org
Mon Apr 14 13:50:39 UTC 2014


On 04/11/2014 11:18 PM, Jaroslav Reznik wrote:
> ----- Original Message -----
>> = Proposed System Wide Change:  The securetty file is empty by default =
>> https://fedoraproject.org/wiki/Changes/securetty_file_is_empty_by_default
>>
>> Change owner(s):  quickbooks <quickbooks.office at gmail.com>
>>
>> The securetty file is empty by default
>>
>> There's on-going discussion for this Change on the devel list.
>> https://lists.fedoraproject.org/pipermail/devel/2014-April/197344.html
> 
> Fedora Base Working Group discussed this Change on today's meeting 
> (2014-04-11) and tends to support counter proposal to remove securetty
> entirely from the default PAM configuration (not from distribution)
> as discussed in the thread mentioned above. Base WG would like to ask
> FESCo to weight it as part of decision making (once this change hits
> FESCo meeting).
> 
Apologies for being late to the discussion as well - just wanted to note
that I've been running root-password-less configurations for some time
(by using passwd -l to lock out the root account post-install), and
later encountered this scenario whereby one of the disks failed fsck and
I was dropped into a single-user mode login for maintenance, where I was
prompted for... you get it, the root password.

Resorted to rebooting and disabling fsck from grub, but how to handle
fsck errors should probably be considered as part of this proposed change.

Best regards,

-- 
Michel Alexandre Salim
Fedora Project Contributor: http://fedoraproject.org/

Email:  salimma at fedoraproject.org  | GPG key ID: A36A937A
Jabber: hircus at jabber.ccc.de       | IRC: michel-slm at irc.freenode.net

()  ascii ribbon campaign - against html e-mail
/\  www.asciiribbon.org   - against proprietary attachments


More information about the devel mailing list