[archhurd-devel] /bin/login issues

[Matthias Lanzinger <mlaenz@gmail.com>]

There has been some discussion on IRC about the login shell.
Especially security issues related to it (using up resources without the
need to login)

This of course is a problem and one way to solve it would be changing
our login binary, most likely to the one from the shadow (the one
you use by default in ArchLinux or on most other Linux systems).
Another option for security-aware users may be compiling the shadow
login themselves and adding a NoUpgrade=bin/login to their pacman.conf.
This should be very easy and painless with some documentation on the
wiki.

Now the security problem isn't very big imo because it requires physical
access to the machine and the login shell is a nice feature that
may be very useful in some situations.

So opinions on changing the default login binary?

Matthias