[Bug 997308] Re: [GRUB-PC] Security Fail - Root access without password in recovery mode.

[Phillip Susi]

This is not a bug, and will not be fixed, so please stop changing the
status.  Other distributions do not set a grub password by default
either.  Without that, you can edit the kernel command line and even if
there is a root password, you can simply pass init=/bin/bash and get
dropped directly to a root shell.  See the third misconception here:

https://help.ubuntu.com/community/RootSudo


** Changed in: grub2 (Ubuntu)
       Status: Confirmed => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/997308

Title:
  [GRUB-PC] Security Fail - Root access without password in recovery
  mode.

Status in “grub2” package in Ubuntu:
  Invalid

Bug description:
  Hi,

  Root access without password with grub-pc in Ubuntu 12.04 LTS.
  Root access must necessarily need a password!!!

  Thanks, best regards

  ProblemType: Bug
  DistroRelease: Ubuntu 12.04
  Package: grub-pc 1.99-21ubuntu3
  ProcVersionSignature: Ubuntu 3.2.0-23.36-generic 3.2.14
  Uname: Linux 3.2.0-23-generic x86_64
  ApportVersion: 2.0.1-0ubuntu5
  Architecture: amd64
  Date: Wed May  9 22:00:09 2012
  InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425)
  ProcEnviron:
   PATH=(custom, no user)
   LANG=fr_FR.UTF-8
   SHELL=/bin/bash
  SourcePackage: grub2
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/997308/+subscriptions