Unexpected behaviour with gdm auto-login

[Matt Zimmerman]

On Fri, Nov 19, 2004 at 07:51:35PM -0500, Dmitriy Kropivnitskiy wrote:

> Don't you think it is a little silly complaining about such an issue,
> since you set your display manager to automatically login your user
> after 60 seconds without asking for a password. So, if someone tries to
> access your box, they might try to enter wrong user name and password,
> but if they just wait, they would still login as you. I really do not
> see this as a security flow, since by enabling the automatic login you
> have made your system inherently vulnerable for a person with physical
> access to the system.

It is not a security problem, but it does seem unintuitive.

-- 
 - mdz