On Thu, Feb 16, 2012 at 1:59 AM, Emilio Lopez <[email protected]> wrote: > Hello, > > If I select recovery in grub menu, Fedora starts as root without > asking for password. Is this the expected behavior?
Yes. You can password protect it by changing SINGLE to '/sbin/sushell' in /etc/sysconfig/init. But then, a determined user could add "init=/bin/bash" to the kernel command line and get around it. Setting a GRUB password moves the goal post to requiring a Live CD, while secure boot moves it to ripping the hard drive out of the machine. If someone has physical access to the machine, you've already lost. -T.C. -- users mailing list [email protected] To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines Have a question? Ask away: http://ask.fedoraproject.org
