[Touch-packages] [Bug 1347907] Re: create a delay for password failure attempts

2014-07-24 Thread Michael Terry
** Also affects: unity8 (Ubuntu) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity8 in Ubuntu. https://bugs.launchpad.net/bugs/1347907 Title: create a delay for password

[Touch-packages] [Bug 1347907] Re: create a delay for password failure attempts

2014-07-24 Thread Michael Terry
** Also affects: ubuntu-ux Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to unity8 in Ubuntu. https://bugs.launchpad.net/bugs/1347907 Title: create a delay for password failure

[Touch-packages] [Bug 1347907] Re: create a delay for password failure attempts

2014-07-24 Thread Michael Terry
Oh and one security facet of pam_tally2 is that because we're not using the split greeter, we'd have to store the tally record in the user's home directory. I don't think this is a security risk, since if you have access to the home directory, you don't need to bother with being locked out. And

[Touch-packages] [Bug 1347907] Re: create a delay for password failure attempts

2014-07-24 Thread Michael Terry
I've added an ubuntu-ux task, because I'd like guidance for how this is presented to the user. My thinking from a technical POV is that we can use a PAM module (pam_tally2) to record failed logins. The timing is configurable with it, but the default behavior is to just silently fail. That is,