Re: gdm minor security issue...

["James M. Cape" <jcape jcinteractive com>]

Daniel Burrows wrote:
> 
> On Sun, Mar 14, 1999 at 12:04:32AM +0100, Martin Kasper Petersen was heard to say:
> > gdm will install with gdmlogin as default from now on. The old and
> > more featureful gdmgreeter will be provided for environments where
> > usernames can be exposed.
> 
>   This sounds a little extreme to me.  I don't think this will be extremely
> important for most people (home users) and if people setting up systems that
> are supposed to be high security accept default configurations for everything,
> they probably have more issues than user names possibly appearing.
> 
>   As usual, however, there is a distinct chance that everything I have said is
> utter nonsense. ;-)
> 
>   Daniel

I would rather the default was *not* the lesser of the two securities. I
personally think that default installations should make it so nothing is
running, and if the user wants/needs to turn something on, they have to
know what it is they are turning on. So the end user can't have
something running if they don't know about it.

    Jim Cape
    http://www.jcinteractive.com

    "All animals are equal, some animals
     are more equal than others."
         -- George Orwell, Animal Farm