[gdm/gnome-3-18] gdm-session: require a password for for remote logins



commit 844814bdc76583860318d9f3acf117c5e75f6e20
Author: Tim Lunn <tim feathertop org>
Date:   Tue Apr 12 14:40:48 2016 +1000

    gdm-session: require a password for for remote logins
    
    Many remote services refuse passwordless logins, so administrators may find it
    surprising that the login screen over XDMCP doesn't require a password on the
    account.
    This commit toggles to that default.
    
    Note, this change doesn't really make XDMCP more secure. It is inherently
    insecure over an untrusted network, since it's a completely plain text
    protocol.
    
    https://bugzilla.gnome.org/show_bug.cgi?id=764669

 daemon/gdm-session-worker.c |    2 ++
 1 files changed, 2 insertions(+), 0 deletions(-)
---
diff --git a/daemon/gdm-session-worker.c b/daemon/gdm-session-worker.c
index 8fda3b3..6f48031 100644
--- a/daemon/gdm-session-worker.c
+++ b/daemon/gdm-session-worker.c
@@ -1080,6 +1080,8 @@ gdm_session_worker_initialize_pam (GdmSessionWorker *worker,
         ensure_login_vt (worker);
         g_snprintf (tty_string, 256, "/dev/tty%d", worker->priv->login_vt);
         pam_set_item (worker->priv->pam_handle, PAM_TTY, tty_string);
+        if (!display_is_local)
+                worker->priv->password_is_required = TRUE;
 
  out:
         if (error_code != PAM_SUCCESS) {


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]