On Thu, 13 Jun 2002, Bret Hughes wrote:

> On Thu, 2002-06-13 at 16:50, Jon Gaudette wrote: This is great and all
> for in this case, when you forget your password, but what about the
> security implications of this?  Can't just "any ol' user" do this and
> gain root privledges?
> 
> Yep.  Physical security of a machine is important.  You can help a
> little by setting a pasword in lilo (and I assume grub) for booting into
> singlemode.

the GRUB password is required *only* if you try to edit the boot line
to do something other than the default boot.

of course, one can bypass this entirely by booting off the CD-ROM in
rescue mode -- at that point, only a BIOS password might get in the
way.

rday



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to