Ubuntu 9.10 loses some security via login screen

Bug #489984 reported by Tom V
This bug report is a duplicate of:  Bug #445123: No GUI option to disable face browser. Edit Remove
10
This bug affects 1 person
Affects Status Importance Assigned to Milestone
gdm (Ubuntu)
New
Undecided
Unassigned

Bug Description

Previous versions of Ubuntu always prompted users for BOTH a user name and password. Now it appears that the or a user name is loaded at startup and if the user agrees with the selection then the enter key is pressed and a password in entered. This makes Karmic slightly less secure than previous versions which required the user to enter both at the login screen. If Linux is to continue to advertise itself as being a more secure operating system then the convenience of having the OS preselect my user name at startup should give way to the older method of having the user required to supply both.
Is there a way to disable this auto selecting of a user?

ProblemType: Bug
Architecture: amd64
Date: Sun Nov 29 11:23:40 2009
DistroRelease: Ubuntu 9.10
ExecutablePath: /usr/bin/yelp
NonfreeKernelModules: nvidia
Package: yelp 2.28.0-0ubuntu2
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
ProcVersionSignature: Ubuntu 2.6.31-15.50-generic
SourcePackage: yelp
Uname: Linux 2.6.31-15-generic x86_64

Revision history for this message
Tom V (tvice) wrote :
visibility: private → public
Revision history for this message
BrianS (brians200) wrote :

sudo -u gdm gconftool-2 --type bool --set /apps/gdm/simple-greeter/disable_user_list 'true'

that will make it to where you have to type user name and password

security vulnerability: yes → no
affects: ubuntu → gdm (Ubuntu)
Revision history for this message
Phil Buckler (buck2825) wrote :

sudo -u gdm gconftool-2 --type bool --set /apps/gdm/simple-greeter/disable_user_list 'true'

returns

Error setting value: Can't overwrite existing read-only value: Value for `/apps/gdm/simple-greeter/disable_user_list' set in a read-only source at the front of your configuration path

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.