Bug#536542: slim: allows login as root without password

2009-07-21 Thread Mike Massonnet
2009/7/21 Nico Golde : > Hi, > * Mike Massonnet [2009-07-21 17:26]: >> Thank you Nico for having taken care of the security bugs. The issue >> is really simple to solve in fact, tho I never noticed it (actually >> this is not the default behavior of slim, I made that change by >> following the sug

Bug#536542: slim: allows login as root without password

2009-07-21 Thread Nico Golde
Hi, * Mike Massonnet [2009-07-21 17:26]: > Thank you Nico for having taken care of the security bugs. The issue > is really simple to solve in fact, tho I never noticed it (actually > this is not the default behavior of slim, I made that change by > following the suggestion from bug #499048). So t

Bug#536542: slim: allows login as root without password

2009-07-19 Thread Nico Golde
Hi, * Piotr Engelking [2009-07-19 20:28]: > 2009/7/16 Nico Golde : > > > This is not really a bug but a feature, you can disable it > > editing /etc/slim.conf. However I agree this is not really a > > nice feature in a default configuration. I think a big fat > > note to README.Debian should be a

Bug#536542: slim: allows login as root without password

2009-07-19 Thread Piotr Engelking
2009/7/16 Nico Golde : > This is not really a bug but a feature, you can disable it > editing /etc/slim.conf. However I agree this is not really a > nice feature in a default configuration. I think a big fat > note to README.Debian should be added to warn users of the > possible implications. The

Bug#536542: slim: allows login as root without password

2009-07-16 Thread Nico Golde
Hi, * Piotr Engelking [2009-07-11 14:35]: > Package: slim > Version: 1.3.0-2 > Severity: grave > Tags: security > Justification: user security hole > X-Debbugs-Cc: t...@security.debian.org > > Typing 'console' in the SLiM login prompt opens a gnome terminal running > login(1). Opening a new termi

Bug#536542: slim: allows login as root without password

2009-07-10 Thread Piotr Engelking
Package: slim Version: 1.3.0-2 Severity: grave Tags: security Justification: user security hole X-Debbugs-Cc: t...@security.debian.org Typing 'console' in the SLiM login prompt opens a gnome terminal running login(1). Opening a new terminal from the terminal menu (File -> Open Terminal) opens a gn