Re: gdm minor security issue...

[i2ambler <i2ambler bellsouth net>]

On Sat, 13 Mar 1999, B wrote:

unfortunately, as you may or may not have seen in my previous post, I cant get
the bloody thing to compile! :(
 > Well that was easy to fix....
> 
> in gdmgreeter.c on line 1183  change
> 
> 	if(g_list_length(result) == 1) {
> 
> to
> 
> 	if(g_list_length(result) == 1 || GdmDisplayBrowser == 0) {
> 
> 
> And you're all set...
> 
> Britt
> 
> On Sat, 13 Mar 1999, B wrote:
> 
> > On the gdm login screen if you enter an invalid username (aka the user
> > doesn't exist on the machine) you can't tab to the password field.  Thus a
> > user could, in theory, probe for valid usernames on a machine.
> > 
> > This is minor, but something that most systems try not to allow.  
> > 
> > I imagine the best fix would involve always allowing tabing to the
> > password field if the browser is turned off.
> > 
> > I'll now commence an attempt to fix this... he he he I've never mucked
> > with gnome code before :)
> > 
> > B
> > 
> > -----------------------------------------------------------------------
> >                                   Britt Bolen  -  bolen@hcs.harvard.edu 
> >                                                 hcs.harvard.edu/~bolen/
> >                                                                   blah!
> > 
> > 
> > -- 
> >         FAQ: Frequently-Asked Questions at http://www.gnome.org/gnomefaq
> >          To unsubscribe: mail gnome-list-request@gnome.org with 
> >                        "unsubscribe" as the Subject.
> > 
> 
> B
> 
> -----------------------------------------------------------------------
>                                   Britt Bolen  -  bolen@hcs.harvard.edu 
>                                                 hcs.harvard.edu/~bolen/
>                                                                   blah!
> 
> 
> -- 
>         FAQ: Frequently-Asked Questions at http://www.gnome.org/gnomefaq
>          To unsubscribe: mail gnome-list-request@gnome.org with 
>                        "unsubscribe" as the Subject.