Security Basics mailing list archives

Re: security scenario


From: "Jonathan Bowman" <jbowman () colorado edu>
Date: Mon, 27 Jan 2003 10:55:04 -0700

Probably the simplest thing to do is to add a password to grub.  Edit
/boot/grub/grub.conf and add the line "password=yourpassword".  Then don't
forget to set appropriate permissions on that file and probably
/etc/grub.conf so that random people can't just look up the password.

Good Luck,
-Jonathan

----- Original Message -----




consider this (I'm trying to make a network more secure) :
A user enters grub upon bootup and hits "e" to edit the Linux boot
procedure and then continues to boot into single user mode, and he then
chagnes the root password to whatever he suits.... the user who did this
is eventually tracked down and taken care of.

Now, how would I prevent this from happening in future instances?


Current thread: