I am not sure which list to post this question, but it sure seemed to be a security issue to me. I have a laptop with Fedora 16-x86_64bit installed. One day last week I noticed that I was not required to enter a password to log in from the graphical screen. This is true with all users and when using both Gnome and KDE desktops. I have searched everywhere I can think of and can't seem to find a artical describing this issue. I have verified that auto-login has not been configured in either Gnome or KDE. Strangely enough, if the screen saver kicks in I have to enter a password to unlock it and if I switch to a textual session (Alt-F2 for example) I have to enter both username and password to login.