Ugh! Well I think the policy is pretty lax, but I'm not going to be able to change that, at least not without some support and not in time for this release.
While it's true that the user list displays the Full Name, I'd argue that that's even worse - it would thwart any attempt to protect usernames by not basing them on full names as well - e.g. if I share my laptop with five co-workers, our usernames are based on our employee numbers, and one of my line reports decides he wants to look at my account... he just selects my name from the list. I realise this might all sound very contrived, but security isn't an "on or off" thing - it's better if it's in layers, and by removing the need to know a username one layer has just been removed. So I have encrypted LVM, I have encrypted home directories. All fine and dandy for me so far, because I've gone out of my way to harden my machine from the default configuration. Now how, in Karmic, can I disable the user list so I have to enter a username? gdmsetup is completely pared back now and doesn't give me the option. I'm sure there's something I can do from the CLI and I'm comfortable doing that - but less experienced users won't be. -- Default gdm theme is insecure https://bugs.launchpad.net/bugs/420222 You received this bug notification because you are a member of Ubuntu Bugs, which is a direct subscriber. -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
