Ubuntu security hole? (not super major, but wondering if it is an issue to report)

[Chanchao]

On Tue, 2006-05-09 at 10:03 +0100, Dick Davies wrote:


> What would be the point? It would'nt stop an attacker with physical access
> (they'd just pull the drive and blank the passwords. I know I do),

Well I did say "physically secured the computer, etc."

But then, what's the point of having any passwords at all then when the
computer is not physically secure?   

At the very least this behaviour is inconsistent with requiring
passwords elsewhere, if you're not going to bother with passwords once
something goes wrong.

Cheers,
Chanchao