Take the 2-minute tour ×
Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems.. It's 100% free, no registration required.

I found that, in /etc/inittab, this modification (-a username) for the user u disables the login/password check for all tty:s:

1:2345:respawn:/sbin/getty -a u 38400 tty1
2:23:respawn:/sbin/getty -a u 38400 tty2
3:23:respawn:/sbin/getty -a u 38400 tty3
4:23:respawn:/sbin/getty -a u 38400 tty4
5:23:respawn:/sbin/getty -a u 38400 tty5
6:23:respawn:/sbin/getty -a u 38400 tty6

That would be great for me, not having to type the password all the time!

Question is, apart from the case when the computer gets stolen, the thief could use the system (which I would prefer, come to think of it), what security implications does this configuration have?

Possibly relevant: The second column (runlevels).

share|improve this question

1 Answer 1

up vote 1 down vote accepted

I use autologin, not just disable the password ;-)

If your disk is not encrypted, they could just boot from external media and steal your data. So autologin isn't a problem for thieves, but people near you (that can access your computer when you're not here).

Just don't let people around you know that they could login as root without password...

EDIT

In this case, you run autologin at local tty, remote login normally use pts (pesudo tty), they don't interfere each other

share|improve this answer
    
OK, what I meant was, is there a "remote" threat? –  Emanuel Berg Oct 17 '12 at 2:21
    
@EmanuelBerg updated –  warl0ck Oct 17 '12 at 2:28

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.