Bug 540503

Summary:	Boot sequence doesn't require password even if auto-login disabled
Product:	[openSUSE] openSUSE 11.2	Reporter:	Tim Holy <holy>
Component:	Security	Assignee:	E-mail List <kde-maintainers>
Status:	RESOLVED DUPLICATE	QA Contact:	E-mail List <qa-bugs>
Severity:	Major
Priority:	P5 - None	CC:	security-team
Version:	Milestone 7
Target Milestone:	---
Hardware:	x86
OS:	SUSE Other
Whiteboard:
Found By:	---	Services Priority:
Business Priority:		Blocker:	---
Marketing QA Status:	---	IT Deployment:	---

Description Tim Holy 2009-09-19 12:39:56 UTC

User-Agent:       Mozilla/5.0 (compatible; Konqueror/4.3; Linux) KHTML/4.3.1 (like Gecko) SUSE

Fresh install of 11.2 milestone 7, I did the "standard install" from the KDE live CD.

When I boot up the computer, it gets all the way through logging in to the one-and-only user's account, without ever asking for a password---meaning, anyone who turns on the computer has access to that user's files.

I've checked the KDE Login Manager (kdm config), and neither "Enable password-less logins" nor "Enable auto-login" is checked. I've even tried checking them, hitting "apply," unchecking them, and hitting "apply" without apparent effect.

Reproducible: Always

Steps to Reproduce:
1. Install from KDE live CD milestone 7, use standard install, create a single user account.
2. Boot up computer, notice that the user is not required to supply a password to log in to his/her account.
Actual Results:  
User gains access to account without supplying password.

Expected Results:  
I expected to be presented with a KDM login screen requiring selection of the user and typing the password.

Comment 1 Lubos Lunak 2009-10-01 15:37:40 UTC

You left autologin enabled during install, it is configured in /etc/sysconfig/displaymanager.

*** This bug has been marked as a duplicate of bug 267903 ***