[2100] in RedHat Linux List

home help back first fref pref prev next nref lref last post

Re: Is "linux single" a security concern?

daemon@ATHENA.MIT.EDU (Piete Brooks)
Thu Oct 31 16:59:16 1996

Cc: redhat-list@redhat.com
To: Chris Powell <helios@brickandivy.com>
In-reply-to: Your message of Thu, 31 Oct 1996 16:36:58 -0500.
             <199610312136.QAA00435@hexagram.brickandivy.com> 
Date: Thu, 31 Oct 1996 21:51:24 +0000
From: Piete Brooks <Piete.Brooks@cl.cam.ac.uk>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com

> Not all machines can be physically secured (e.g. in a large office building, 
> perhaps) and it seems that it would be a trivial way to gain root access to 
> any Linux box.
> Am I misunderstanding something fairly obvious here?

See "man lilo.conf"

%	password=password
%		Protect the image by a password.

%	restricted
%		A password is only required to boot  the  image  if
%		parameters  are specified on the command line (e.g.
%		single).

The above allows you to lock out "linux single".

If you can also set the BIOS to boot only from HD, password protect the BIOS,
and put an anti-tamper microswitch on the case, you should be fairly safe.
If not, please let me know !!


--
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
  ________________________________________________________________________
  http://www.redhat.com/RedHat-FAQ   http://www.redhat.com/RedHat-Errata
  http://www.redhat.com/RedHat-Tips  http://www.redhat.com/mailing-lists
  ------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null


home help back first fref pref prev next nref lref last post