[gdm/gnome-3-18] gdm-session: require a password for for remote logins
- From: Tim Lunn <timl src gnome org>
- To: commits-list gnome org
- Cc:
- Subject: [gdm/gnome-3-18] gdm-session: require a password for for remote logins
- Date: Thu, 14 Apr 2016 07:01:49 +0000 (UTC)
commit 844814bdc76583860318d9f3acf117c5e75f6e20
Author: Tim Lunn <tim feathertop org>
Date: Tue Apr 12 14:40:48 2016 +1000
gdm-session: require a password for for remote logins
Many remote services refuse passwordless logins, so administrators may find it
surprising that the login screen over XDMCP doesn't require a password on the
account.
This commit toggles to that default.
Note, this change doesn't really make XDMCP more secure. It is inherently
insecure over an untrusted network, since it's a completely plain text
protocol.
https://bugzilla.gnome.org/show_bug.cgi?id=764669
daemon/gdm-session-worker.c | 2 ++
1 files changed, 2 insertions(+), 0 deletions(-)
---
diff --git a/daemon/gdm-session-worker.c b/daemon/gdm-session-worker.c
index 8fda3b3..6f48031 100644
--- a/daemon/gdm-session-worker.c
+++ b/daemon/gdm-session-worker.c
@@ -1080,6 +1080,8 @@ gdm_session_worker_initialize_pam (GdmSessionWorker *worker,
ensure_login_vt (worker);
g_snprintf (tty_string, 256, "/dev/tty%d", worker->priv->login_vt);
pam_set_item (worker->priv->pam_handle, PAM_TTY, tty_string);
+ if (!display_is_local)
+ worker->priv->password_is_required = TRUE;
out:
if (error_code != PAM_SUCCESS) {
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]