Ubuntu security hole? (not super major, but wondering if it is an issue to report)

Dick Davies rasputnik at gmail.com
Tue May 9 09:03:10 UTC 2006


On 09/05/06, Matthew R. Dempsky <mrd at alkemio.org> wrot
> However, I see nothing wrong with being able to configure the kernel not
> to drop to a shell in case of an error.  Then grub could be configured
> by default to boot a kernel configured as such; if an error occurs,
> reboot, enter your grub password to temporarily edit the kernel options,
> and get your root shell to fix things.

What would be the point? It would'nt stop an attacker with physical access
(they'd just pull the drive and blank the passwords. I know I do),
it'd just make
forgetting the root/sudo password more irritating.
--
Rasputin :: Jack of All Trades - Master of Nuns
http://number9.hellooperator.net/




More information about the ubuntu-users mailing list