[securityguide] add recommandation

Mon Oct 6 14:34:43 UTC 2014

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Maybe someone else would like to comment here...

On Sat, Oct 04, 2014 at 08:07:56AM +0000, Fabian Affolter wrote:
> commit a7b06bdc34a327d4fd01308cabc2ff4a2b0828c2
> Author: Fabian Affolter <fab at fedoraproject.org>
> Date:   Sat Oct 4 10:07:34 2014 +0200
> 
> -					Install <package>pam_yubico</package>
> +					Install <package>pam_yubico</package> as root.

"as root" seems redundant.  One can *only* install the package as root so "as root" is already a given.

> -					To simple use the yubikey token without your password remove the first line from the step above and replace it with the second.
> +					To simple use the yubikey token without your password remove the first line from the step above and replace it with the second. It's not recommanded to use the yubikey without a password.  

Why is it not recommended (and always check your spelling) to use a Yubikey without a password?  If we're going to add a sentence in like this it should either be an admon or we need to talk about it more.  In this case I think we should talk about it more.

- -- Eric

- --------------------------------------------------
Eric "Sparks" Christensen
Fedora Project

sparks at fedoraproject.org - sparks at redhat.com
097C 82C3 52DF C64A 50C2  E3A3 8076 ABDE 024B B3D1
- --------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQGcBAEBCgAGBQJUMqh9AAoJEB/kgVGp2CYvxGUL/R/u0K4USp70KO6bTIIbnOm9
7pagBLrX6s7jhe+IihO/YM6LlaPfWZDsKwCyNXl2u2JVkY8nWlzDXQ9fOu/ecWM4
yjbOwkDafCOZLfej23+/dGnCk0mG1kFEpH9yvt3j8/Cf8+LpkobU9NSnuqacKsxw
+8E3lQRkMydVFpMnYfwCtB2gR2/ocCG+1FwJ6ymMZHhQRS2DnHDOeSLxVTl8+gts
E4Fu+ZxC+9BxyNO9kJD3L3LX6tkFxrjRPNNIfdJ2zJe5kZ5p0VtrpE39giQqB7eo
r+VwGiplqx+5jpbdQ11gqwJn2fzcE+opi6GXzLotCwCbBkjs8Wre4R213+ecbJBR
owG+3xQtMFwQJzA+W6KBSDbC8mOabCxsMiDAYO52mYFzO+8eC/8D+uIQMFKOgDM2
sz4c3lYWubuaZKSc2+JjARQJkdE+i1CA/OygfKHYk/VnU6s9yeuAhj/M/VUuzw/X
ee9WcfrJVjYalZIPld0CEx1ixNC3FZZ64nQBd5DBzg==
=9scq
-----END PGP SIGNATURE-----