Red Hat Bugzilla – Bug 118679
bluecurve login screen displays last login before password is controlled
Last modified: 2007-11-30 17:10:38 EST
Description of problem:
bluecurve login screen displays last login before password is controlled.
please observe that the indicated component is selcted only because some needed to be
selected. please move to correct.
Version-Release number of selected component (if applicable):
fedora core 2 test 1.90
Steps to Reproduce:
1. start X (without beeing logged in) (runlevel5)
2. at the login screen, type the username, press <ENTER>
3. if the user exists and has been logged on, the screen will display last logon
information even though the password is not entered.
Actual Results: last logon is showed prior to complete logon,
thus allowing "hackers" to faster find valid usernames.
Expected Results: no information at all should be showed after the username is
*** This bug has been marked as a duplicate of 118067 ***
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.