F13: only others user is available at login

Chuck Anderson cra at WPI.EDU
Mon Feb 22 13:56:24 UTC 2010


On Mon, Feb 22, 2010 at 09:59:56AM +0000, Alan Milnes wrote:
> >  Lists of usernames is reasonable primarily for residential use - ie
> > not laptop or any other location.
> >
> >  Lets take the lead on this one and not leak information by default.
> >
> 
> Agree 100%.
> 
> To login you need the username and password - why help the bad guys by
> giving them 50% of the information they need?

If you have console access, the game is already over.  If you have a 
special case, like a kiosk that is physically secured, or a remote 
desktop arrangement, you can change the setting yourself.  For the 
common case of a local-only gdm it is appropriate to have the user 
list.


More information about the test mailing list