[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Full-disclosure] Ubuntu 11.10 now unsecure by default



On Fri, 18 Nov 2011 12:24:36 +0100, Mario Vilas said:
> Let's not overreact. We're talking about a guest account only on dekstop
> systems, for local login only, and perfectly visible to the user. The only
> problem I see here is not having a simple GUI way to disable the guest
> login for a non tech-savvy user, but no more. (Or am I missing something
> here?)

Given that Ubuntu is an African word for "Can't configure Debian", and the
target audience of Ubuntu, the lack of the simple GUI is surprising...

(Yes, there's still one config setting saving your butt in sshd_config - but
for a distro that wraps a Teletubby interface around freaking /bin/su so you
don't accidentally hurt yourself, the fact that there's exactly one config file
setting saving your butt if you manage to enable inbound ssh seems a bit of an
oversight).

Attachment: pgpb8BKkMshKd.pgp
Description: PGP signature

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/