except for those with encrypted disks. That would take me a while longer
Well of course there are those like yourself who can do that. But at that point there is no way to keep someone like you out anyhow. But... It would be nice to better harden it from the 99.999% of attempts.
It would be comparable to digging through a thousand keys to unlock the first door. Then having to dig through thousands of different keys to unlock the second inside door. But only having 5 seconds to dig through all those keys to unlock both doors quick enough to keep it from locking up completely requiring a hard power down and reboot.
No one can root it without both “known” door keys already in hand, use them quickly in sequence, or too late you are not getting in at all because the whole thing locks up and you have to start all over again from power up and reboot.
But at it’s face it would look like the first was just a failed attempt because it gives you the login form again. There would be no indicators at all that the first was successful or not. But entering the second password within 5 seconds would then root it. So the secret requirement of two logins would not even be detectable or obvious. You would have to know it was set up this way. Even if they do guess the first login, screwing around trying to guess the second login in 5 seconds would be near impossible. If they even figure out the problem is that it also needs a second.
Digging through PAM stuff now to see if something can be put together. :)