-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Jason Straight wrote: > On Friday 14 March 2003 11:11 am, Levi Ramsey wrote: > >>If someone has physical access to the computer they can pass their own >>parameters to the kernel, including init=/bin/bash, whcih, bada bing >>bada boom, gives them instant root. > > > man lilo - you can restrict it from allowing cmdline, or even booting > altogether wihout a pw. >
BTW, if you haven't tried: # msec 4 you should (at least on a server machine). Many of the settings there rock (IIRC it restricts by default if you installed in level 4), such as not showing OS details in a getty etc etc ... Regards, Buchan - -- |--------------Another happy Mandrake Club member--------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQE+cjTYrJK6UGDSBKcRAghBAKCcmWVnou3LVCH3988CTPCjJ35mCACgmecF 1XgtEY+VjUAzs7sDNMfZ4FY= =ZAHh -----END PGP SIGNATURE-----
