[Pkg-shadow-devel] Bug#511961: Bug#511961: remove devfs entries from /etc/securetty?

Nicolas François nicolas.francois at centraliens.net
Thu Jan 15 23:26:52 UTC 2009


Hi,

On Thu, Jan 15, 2009 at 11:27:03PM +0100, christoph.anton.mitterer at physik.uni-muenchen.de wrote:
> 
> Just a reminder, but wouldn't it make sense to remove the devfs  
> related entries from /etc/securetty not that it's gone for good? I  
> mean this would also strengthen security a little bit :-)

I intend to remove them after the release of Lenny.

Last time I checked, it was not clear if all kernels from Etch did not
support devfs (or if it was not possible to run Etch with a kernel that
support devfs). In that case, it could happen during an upgrade that a new
shadow is installed and the box is still running a kernel that uses devfs.

For Lenny, I'm much more confident that it will not possible to run with a
devfs enabled kernel or to make this even more painful than it would
probably be.

Best Regards,
-- 
Nekral





More information about the Pkg-shadow-devel mailing list