[1326] in athena10
Re: the debathena-managed metapackage
daemon@ATHENA.MIT.EDU (Jonathan Reed)
Fri Mar 6 17:07:53 2009
Cc: Tim Abbott <tabbott@mit.edu>, debathena@mit.edu
Message-Id: <A3F1AC5A-EF2A-4971-AC7D-407151F6189E@mit.edu>
From: Jonathan Reed <jdreed@MIT.EDU>
To: Greg Price <price@mit.edu>
In-Reply-To: <20090306065440.GH1218@vinegar-pot.mit.edu>
Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes
Content-Transfer-Encoding: 7bit
Mime-Version: 1.0 (Apple Message framework v919.2)
Date: Fri, 6 Mar 2009 17:00:08 -0500
On Mar 6, 2009, at 1:54 AM, Greg Price wrote:
>
> To put a bit more flesh here, the package description lists
>
> 1. configuring the screensaver to allow logouts afer a certain time
> period
> 2. disabling user switching
> 3. disabling console logins
> 4. disabling sshd
> 5. disabling the halt/reboot/suspend commands in gdm and at logout
> 6. setting the root password
>
> [snip]
>
> Jon, what path do you think you'd be happiest presenting to the users
> you have in mind for this package? I think all the would-be -managed
> users I've talked to would want #1-#5. Of course by self-selection
> they're also people who it'd be easy to say "install both -managed and
> -cluster-login-config" to.
#1 No, do not include this. It currently happens only for PUBLIC=true
machines, so most Athena 9 private workstations don't have this feature.
#2 Yes, include this feature.
#3 could go either way. It requires effort to enable console logins
on Athena 9 private workstations, unless you select it as an option
during advanced install. I'll lean towards "Yes, include this feature"
#4 ==broder. There are plenty of private workstations with sshd
enabled that are used by multiple people on console (despite the
implications of that).
#5 Yes, include this, modulo discussion to only disable Suspend and
Hibernate, not the others.
#6 No, do not include this.
