Ask Your Question
0

login without password

asked 2014-11-14 13:46:59 -0500

hermesbrandt gravatar image

updated 2014-11-16 17:59:11 -0500

mether gravatar image

login without password

I am using Fedora 20. My son can log in as myself, just by clicking on Cancel four times on the login screen. Looks like a security leak. Is this fixable?

edit retag flag offensive close merge delete

Comments

Welcome to Ask Fedora! Please take a moment to read the guidelines here: http://tinyurl.com/askfedora-guidelines

I'd first suggest making sure that all updates have been applied and rebooting. If you can replicate the issue after that, it would help if you logged in that way, then immediately did something like sudo journalctl --since -2m to get the previous two minutes of logs and hopefully info about what happened. Update your question that or more info, and we'll take a closer look.

randomuser gravatar imagerandomuser ( 2014-11-14 14:21:36 -0500 )edit

I can not reproduce that with gdm and fedora 20 up to date. With local or network account.

baoboa gravatar imagebaoboa ( 2014-11-14 16:30:08 -0500 )edit

I first updated Fedora20 with “ sudo yum update”. This took between 5 and 10 minutes and finished with “Complete!” I then rebooted the computer. When I got the login screen, I clicked Cancel 4 times, then got the desktop, or what do you call that screen in Linux? When I clicked on Terminal, I got the login screen again, which I got around by clicking Cancel again 4 times. I then entered the command “sudo journalctl --since -2m” and now had to give my password in order to execute it. (cont'd in next comment)

hermesbrandt gravatar imagehermesbrandt ( 2014-11-14 17:27:12 -0500 )edit

(continuation of previous comment) So there is some security there, but still I would prefer my son not to be able at all to start up my computer and look and who knows what on the internet. I copied the contents of the log file to the file 20141114 log file.odt, which I would attach to this conversation, but I don't seem to be able to do that. Since the file is too long for a comment in this forum, how can I get it to you?

hermesbrandt gravatar imagehermesbrandt ( 2014-11-14 17:27:38 -0500 )edit

I have to retract " with administrative rights" from my original question, but I would like my son not to be able to log in at all and browse the internet by himself.

hermesbrandt gravatar imagehermesbrandt ( 2014-11-14 17:38:15 -0500 )edit

1 Answer

Sort by » oldest newest most voted
0

answered 2014-11-16 18:00:23 -0500

mether gravatar image

Please file a bug report in http://bugzilla.redhat.com or http://bugzilla.gnome.org and post the link here for reference.

edit flag offensive delete link more

Comments

Bug 1165416 has been added to the database: https://bugzilla.redhat.com/show_bug.cgi?id=1165416

hermesbrandt gravatar imagehermesbrandt ( 2014-11-18 16:38:04 -0500 )edit

Question Tools

1 follower

Stats

Asked: 2014-11-14 13:46:59 -0500

Seen: 461 times

Last updated: Nov 16 '14