severity 741678 normal
tag 741678 - security
tag 741678 moreinfo
thanks

On 03/15/2014 03:24 PM, Evgeny Kapun wrote:
> By default, live-config creates a user with known name (user) and password 
> (live). In live images with included openssh-server, this means that anyone 
> can log into a live system immediately once it connects to a network (which 
> it tries to do during boot).

that is a well known and documented fact since always. what do you
suggest to do differently and how exactly?

-- 
Address:        Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email:          daniel.baum...@progress-technologies.net
Internet:       http://people.progress-technologies.net/~daniel.baumann/


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to