pfSense

Doesn't work at the console for me either. Via SSH it does.

When I click the enable password protect the console menu checkbox it does not immediately take effect.

After a reboot it indeed does.
Logged in, logged out. That worked. Strange.

Aha, after using the playback gitsync it fails to log out. This might somehow be related to the reloading of rc.initial after gitsync kills the old one.

I just killed of pretty much everything that looked a shell but it seems to automatically log in again. When I kill the pam session you immediately see the login banner followed by the menu. Perhaps it is ignoring the pam configuration or it might be generated incorrectly.

AHA!, after a reboot it still logs in immediately. Pressed save on the advanced page, reboot, password protected menu is there again.

Just ran a diff between /etc/gettytab before and after a gitsync.

It indeed removes the :ht:np:sp#115200: with :ht:np:sp#115200:al=root:

So somehow that is not picked up right.