You have been subscribed to a public bug by Marc Deslauriers (mdeslaur):

Binary package hint: ubuntu-desktop

Imho, it would be useful to prompt about "An attacker with physical
access can bypass this restriction easily (eg with bootable media or
removing the hard drive)" and recommend user to crypt their drive(s) in
installer, isn`t it?

11.04 Natty

First time when I tried to send this bug I did:

ubuntu-bug -> Security related problems -> I am not promped for a
password when booting to rescue mode -> ?????

By default, the root account is disabled in Ubuntu and use of the "sudo"
command is recommended. Since the root account is disabled, it's not
possible to prompt for the root password when entering single user mode.

For more information, please see:
https://wiki.ubuntu.com/SecurityTeam/FAQ#Rescue%20Mode

On the link:

This is related to 'sudo', above. Because in Ubuntu there is no root
password, there is nothing to prompt for. In general, not prompting for
a password in single user mode does not decrease security because it
requires physical access to the machine. An attacker with physical
access can bypass this restriction easily (eg with bootable media or
removing the hard drive). If you decide to set a root password, you will
be prompted for it in rescue mode.

ProblemType: Bug
DistroRelease: Ubuntu 11.04
Package: bash 4.1-2ubuntu4
ProcVersionSignature: Ubuntu 2.6.37-7.19-generic 2.6.37-rc3
Uname: Linux 2.6.37-7-generic i686
Architecture: i386
Date: Sun Dec 12 20:15:52 2010
ExecutablePath: /bin/bash
InstallationMedia: Ubuntu 11.04 "Natty Narwhal" - Alpha i386 (20101202)
ProcEnviron:
 LANG=ru_RU.utf8
 SHELL=/bin/bash
SourcePackage: bash

** Affects: ubuntu-meta (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: apport-bug i386 natty
-- 
I am not promped for a password when booting to rescue mode
https://bugs.launchpad.net/bugs/689331
You received this bug notification because you are a member of Ubuntu Bugs, 
which is a direct subscriber.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to