On Fri Mar 14  9:23 -0500, jokerman64 wrote:
> I disagree, i don't think that if you go into single user mode that you should 
> be root. You should still have to log in. The argument that someone has 
> physical access to your computer thus making it your problem and not an 
> exploit is IMHO fallacious. No one should be able to get root that easily.

If someone has physical access to the computer they can pass their own
parameters to the kernel, including init=/bin/bash, whcih, bada bing
bada boom, gives them instant root.

The moral of this is that if your computer is not physically secure it
will never be secure.  This is not saying that there's no point in
making it closer to secure; just that there's a limit to how secure you
can make it.  In addition, some of the extremely high-security measures
are pointless on a non-physically-access controlled system.

-- 
Levi Ramsey
[EMAIL PROTECTED]               [EMAIL PROTECTED]

The food of love is Mandrake root.
GPG Fingerprint: 354C 7A02 77C5 9EE7 8538  4E8D DCD9 B4B0 DC35 67CD
Currently playing: Monster Magnet - Space Lord
Linux 2.4.21-0.13mdk
 11:00:03 up 1 day, 21:06, 13 users,  load average: 0.33, 0.38, 0.34

Reply via email to