Lilo.conf on my box has -rw-r--r-- root , so any user can see the "password=..." string writen in clear text. Just exactly as you wrote, if anyone has a physical access, he WILL own my box if he wants... :-( > -----Original Message----- > From: Alex Shnitman [SMTP:[EMAIL PROTECTED]] > Sent: т 19 ёєшюсј 2000 19:25 > To: IGLU > Subject: Re: Get rid og linux single in red hat > > Hi, єхєхс! > > On Tue, Sep 19, 2000 at 07:05:10PM +0200, you wrote the following: > > > Anyone knows how one can secure a Linux box localy against booting it in > > single mode by anwanted persons ? > > At least in my RH boxes everyone can type "linux single" in LILO prompt > and > > then passwd to kick me off. > > Add the following lines to lilo.conf: > > password = m2D92n3zf > restricted > > Then adding parameters to the kernel will require entering this > password. (Booting without adding parameters won't.) > > You may also want to make sure that the BIOS is set up to not boot > from the floppy drive, and that there's a password on the BIOS. That's > about as secure as you can get with it. Be advized that generally, if > someone has physical access to the box he can own it in *some* way, so > it's OK for e.g. university computer rooms where there are people who > look from time to time that people aren't unscrewing boxes and taking > the hard drives out, but it's not 100% foolproof, and it can't be. > > > -- > Alex Shnitman | http://www.debian.org > [EMAIL PROTECTED], [EMAIL PROTECTED] +----------------------- > http://alexsh.hectic.net UIN 188956 PGP key on web page > E1 F2 7B 6C A0 31 80 28 63 B8 02 BA 65 C7 8B BA > > For Sale: Parachute. Only used once, never opened, small stain. > > ================================================================= > To unsubscribe, send mail to [EMAIL PROTECTED] with > the word "unsubscribe" in the message body, e.g., run the command > echo unsubscribe | mail [EMAIL PROTECTED] ннннннннннннннннннннни unsubscribe, send mail to [EMAIL PROTECTED] with the word "unsubscribe" in the message body, e.g., run the command echo unsubscribe | mail [EMAIL PROTECTED]
