[Pkg-shadow-devel] Bug#511961: Bug#511961: remove devfs entries from /etc/securetty?
Nicolas François
nicolas.francois at centraliens.net
Thu Jan 15 23:26:52 UTC 2009
Hi,
On Thu, Jan 15, 2009 at 11:27:03PM +0100, christoph.anton.mitterer at physik.uni-muenchen.de wrote:
>
> Just a reminder, but wouldn't it make sense to remove the devfs
> related entries from /etc/securetty not that it's gone for good? I
> mean this would also strengthen security a little bit :-)
I intend to remove them after the release of Lenny.
Last time I checked, it was not clear if all kernels from Etch did not
support devfs (or if it was not possible to run Etch with a kernel that
support devfs). In that case, it could happen during an upgrade that a new
shadow is installed and the box is still running a kernel that uses devfs.
For Lenny, I'm much more confident that it will not possible to run with a
devfs enabled kernel or to make this even more painful than it would
probably be.
Best Regards,
--
Nekral
More information about the Pkg-shadow-devel
mailing list