On Wednesday 13 February 2002 16:57, you wrote: > Hello, > > Mandrake 8.1 introduced a new feature, through the new kdm: > AutoReLogin. It is supposed to build back the user session if X > crashes (or Ctrl-Alt-Backspace is pressed, which is a handy way not > to wait for eons for KDE to start when one actually wants everything > else but KDE, but sometimes the default goes back to starting KDE > anyway). > > > Be aware that this opens a security hole ! > > Whenever a screen is xlocked (xscreensaver, etc...), anyone just has > to press Ctrl-Alt-Backspace to get re-logged in as the previous user, > but without the screen locked. (See > http://www.google.com/search?q=autorelogin%20security) > > IMO, this should be turned off by default! (AutoReLogin=false in > kdmrc)
/.../ It have never been actived by default. -- David BAUDENS MandrakeSoft - http://www.mandrakesoft.com
