[linux-help] Re: Single User Boot

[Jonathan Hall <jonhall@xxxxxxxxxxxx>]

Something to remember here is:  There is NO SUCH THING as a *completely*
secure computer.

EVERY COMPUTER has the ability to be cracked in to.

The best thing you can do is make it more difficult/expensive for a person
to crack your computer than it is worth to them to find whatever you may
have on your system.

There is no way to prevent someone from gaining root access to your box if
they have physical access to the machine.  Even a BIOS password can be
easily reset if you have physical access to the machine.

Removing the monitor, FDD, etc, is not hard to overcome, either.


On Mon, Aug 21, 2000 at 10:07:12AM -0500, james l wrote:
> This is one feature/flaw linux has, the ability to, with physical access boot 
> into single user mode, and the only way that I know of to stop it is to 
> password protect the computer in the bios, so you have to have 2 passwords 
> (or one if you are lazy). Does anyone know how to stop someone from getting 
> into single user mode without password protecting the bios?
> 
> James L
> 
> 
> 
> > FWIW,
> >     Mandrake uses linux 1 as a boot for single user mode and it disregards
> > any default file reads such as .bash_profile , etc. and takes you straight
> > to a sh$ prompt. No root login  but you are assumed to be the root user,
> > and after much thought (for my tiny brain) it makes sense because, if you
> > have access to the (Uggghh, that's a Microsoft Word.) startup capabilities
> > of the machine then it would be reasonable to assume you are the root user.
> > I know, that's weak logic but hey, it's , mine.
> >
> > -JR
> >
> 
> -- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
> visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi

--
Useless fact #8: Wyoming has the highest number of electoral votes per
capita in the U.S. with one electoral vote for every 160,014 people, 
compared to the national average of 497,664 people per electoral.
--
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Jonathan Hall  *  jonhall@xxxxxxxxxxxx  *  PGP public key available
 Systems Admin, Future Internet Services; Goessel, KS * (316) 367-2487
         http://www.futureks.net  *  PGP Key ID: FE 00 FD 51
                  -=  Running Debian GNU/Linux  =-
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

-- This is the linux-help@xxxxxxxxx list.  To unsubscribe,
visit http://tmp2.complete.org/cgi-bin/listargate-aclug.cgi