Re: Down goes Linux Security!

[asif ansari <ansariasif@xxxxxxxxx>]

Hi,
That feature is for rescue.
Of course you can stop anyone doing that.
You can set a restricted password in lilo.conf.
It will ask for you a password before booting and
giving you a shell.
   Linux is not insecure,it depends on you how do you
configure and finetune your system.
Regards.
Asif.

--- metalmaniac@xxxxxxxxxxxx wrote:
> Hey guys,
> I may have found a security hole!!
> Yesterday I was going through the BootPrompt HOWTO.
> I have LILO installed for booting into Linux or
> Win95.
> Just pass the option "init=/bin/sh" to the kernel,
> and presto! after the boot is complete you are
> dropped into the shell with *root* priveleges.
> One thing though the root file system is mounted
> read-only. but no problem, just issue the command :
> mount -o remount,rw /dev/hda2 and hey! you just have
> total control over the file system as root.
> What the hell is this! anyone can also boot from a
> floppy and mount the hard drive and create havoc!!!
> is there a way out?
> I have given my brother & myself simple user
> accounts.
> only I know the root password, so he can't sneak
> into my home dir and see my personal files. but this
> way he may even change/delete them.
> and I thought Linux was the most secure system
> around!!
> any answers?
> Saurabh nanda
>  
> 
> 
>
______________________________________________________
> 123India.com - India's Premier Portal 
> Get your Free Email Account at
> http://www.123india.com
> 
> 
> 
> ------------------------------------------------
> An alpha version of a web based tool to manage
> your subscription with this mailing list is at
> http://lists.linux-india.org/cgi-bin/mj_wwwusr


__________________________________________________
Do You Yahoo!?
Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
http://photos.yahoo.com/