Depends if their non-profit is Californian or how deeply the mechanism is embedded into their base distro (if applicable).
If 0x0@infosec.pub is right and it’s done through a simple addition to adduser (and the GUIs) every distro that doesn’t actively patch against it, would get it upstream.
And non-commercial distros?
Depends if their non-profit is Californian or how deeply the mechanism is embedded into their base distro (if applicable).
If 0x0@infosec.pub is right and it’s done through a simple addition to adduser (and the GUIs) every distro that doesn’t actively patch against it, would get it upstream.