|

hammerhead-xdm r9: greeter shows bare hostname (no 'Welcome to')

hammerhead-xdm r9: greeter shows bare hostname (no 'Welcome to')

Drop the 'Welcome to' prefix -- invitation language has been argued in
unauthorized-access cases to imply consent. Greeting = CLIENTHOST (hostname only).
Author: Chris Tusa <chris.tusa@leafscale.com>
Date: Jul 24, 2026 12:52
Changeset: b4503723c5d7810b2048d27931425d5e78fe2ad2
Branch: default

Diff

diff -r 8a097b235938 -r b4503723c5d7 base/hammerhead-xdm/Xresources
--- a/base/hammerhead-xdm/Xresources	Fri Jul 24 12:05:47 2026 -0500
+++ b/base/hammerhead-xdm/Xresources	Fri Jul 24 12:52:43 2026 -0500
@@ -14,13 +14,14 @@
 	<Key>Return: set-session-argument() finish-field()
 
 ! `CLIENTHOST` is an xdm token replaced with the system hostname at display
-! time (dynamic per machine). The HAMMERHEAD/ZYGAENA wordmark already lives on
-! the wallpaper, so the greeting shows the host, as login screens conventionally do.
-xlogin*greeting: Welcome to CLIENTHOST
+! time (dynamic per machine). Show ONLY the hostname -- deliberately NO
+! "Welcome"/invitation language, which has been argued in unauthorized-access
+! cases to imply an invitation. Branding lives on the wallpaper wordmark.
+xlogin*greeting: CLIENTHOST
 ! The display IS access-controlled (start.sh starts Xorg with a MIT-MAGIC-COOKIE
 ! -auth file), but xdm does not track auth for a `foreign` display and would
 ! otherwise show its scary "This is an unsecure session". Use the same host text.
-xlogin*unsecureGreeting: Welcome to CLIENTHOST
+xlogin*unsecureGreeting: CLIENTHOST
 xlogin*namePrompt: \040\040\040\040\040\040\040Login:
 xlogin*fail: Login incorrect or forbidden by policy
 
diff -r 8a097b235938 -r b4503723c5d7 base/hammerhead-xdm/package.toml
--- a/base/hammerhead-xdm/package.toml	Fri Jul 24 12:05:47 2026 -0500
+++ b/base/hammerhead-xdm/package.toml	Fri Jul 24 12:52:43 2026 -0500
@@ -10,7 +10,7 @@
 [package]
 name = "hammerhead-xdm"
 version = "1.0.0"
-release = 8
+release = 9
 description = "Zygaena marine-dark xdm greeter branding, system Xsession/Xservers wiring, and a disabled zyginit xdm service"
 url = "https://git.sharkos.one/zygaena/hammerhead"
 license = "CDDL-1.0"