Santosh, You are right about what you're saying here - someone can indeed reboot the m/c and login without providing a password.
All Unices are based on the philosophy that if you have physical access to a system, you own it - you can do anything with the data, including physically damaging the hard disk[s]. Even if you added a boot time password for LILO/GRUB, someone could simply come reboot the m/c and boot [and login as root] from a floppy/another hard disk, mount the existing hard disk, edit the password files and give herself root access. One possible solution against this would be "encrypted" file systems, i.e. where the files are encryted before being written to disk. That way, even if you mount the file system, you won't be able to view/edit the data, though you could probably destroy it. Anyone know of fast, secure, mature, stable, used on ownself encryption based file system for Linux? Regards, -Varun On Thu, Apr 25, 2002 at 09:41:36PM -0700, santosh dubey spoke out thus: > > Dear Kapil, > you have written a reply for muskan's problem in which root forgets his password... > (ur mail is below). in this manner any person will reboot the sytem and via lilo >prompt he will get a system without password and can change password..as u have >written.. > so anyone can become root...in this situation what will happen to security of linux >system .. > i think you can understand what i want to say...? > please clarify it. > thanks > santosh kumar dubey > Kapil Sethi <[EMAIL PROTECTED]> wrote: >i miss a root password i am not >logon, how to logon, > > Muskan reboot your linux, on the lilo prompt type linux single. You will get > into the system without password. > > The change your password using passwd command. > > press ctl-D > > Kapil Sethi > System Administrator > BharatConnect Ltd. > Ph: 011-6430987 > > ================================================ > To subscribe, send email to [EMAIL PROTECTED] with subscribe in subject header > To unsubscribe, send email to [EMAIL PROTECTED] with unsubscribe in subject >header > Archives are available at http://www.mail-archive.com/ilugd%40wpaa.org > ================================================= > > > > --------------------------------- > Do You Yahoo!? > Yahoo! Games - play chess, backgammon, pool and more -- --------------------------------------- Mindframe Software & Services Pvt. Ltd. http://www.mindsw.com --------------------------------------- ================================================ To subscribe, send email to [EMAIL PROTECTED] with subscribe in subject header To unsubscribe, send email to [EMAIL PROTECTED] with unsubscribe in subject header Archives are available at http://www.mail-archive.com/ilugd%40wpaa.org =================================================
