On Wed, 2008-01-09 at 19:20 -0500, Bernardo Innocenti wrote:
Hello Florian,
the attached patches add an option to pause login until the user hits
a key.
We need something like it on OLPC because:
- we don't want to set an empty password for either user root or olpc
- at the same time, we want to allow users to login as root at the
console
- finally, we do not wish to waste memory on shells the user hasn't
yet used
The security model we are implementing is very different from UNIX: we
ultimately trust the user at the console, but we don't trust applications
and we don't want them to gain root privileges using su or sudo with no
password.
I'm committing these changes to the OLPC-2 branch of mingetty in
Fedora CVS. Please, let me know you'd like to merge them or
something similar.
Such things are definitely better upstreamed if possible. Have you tried
contacting upstream?
Thanks,
--
Lubomir Kundrak (Red Hat Security Response Team)