Re: Down goes Linux Security!

[Supreet Sethi <supreetsethi@xxxxxxxxx>]

Security is just not about software security or passwords. Security has
various levels. 
 Physical
 software
 and many others 
 These issues are fully covered in Security HOWTO
 and Trinity OS. 
 Search and read them too. 
 Reading is a very good thing






On Thu, Oct 05, 2000 at 03:47:30AM -0700, asif ansari wrote:
> Hi,
> That feature is for rescue.
> Of course you can stop anyone doing that.
> You can set a restricted password in lilo.conf.
> It will ask for you a password before booting and
> giving you a shell.
>    Linux is not insecure,it depends on you how do you
> configure and finetune your system.
> Regards.
> Asif.
> 
> --- metalmaniac@xxxxxxxxxxxx wrote:
> > Hey guys,
> > I may have found a security hole!!
> > Yesterday I was going through the BootPrompt HOWTO.
> > I have LILO installed for booting into Linux or
> > Win95.
> > Just pass the option "init=/bin/sh" to the kernel,
> > and presto! after the boot is complete you are
> > dropped into the shell with *root* priveleges.
> > One thing though the root file system is mounted
> > read-only. but no problem, just issue the command :
> > mount -o remount,rw /dev/hda2 and hey! you just have
> > total control over the file system as root.
> > What the hell is this! anyone can also boot from a
> > floppy and mount the hard drive and create havoc!!!
> > is there a way out?
> > I have given my brother & myself simple user
> > accounts.
> > only I know the root password, so he can't sneak
> > into my home dir and see my personal files. but this
> > way he may even change/delete them.
> > and I thought Linux was the most secure system
> > around!!
> > any answers?
> > Saurabh nanda
> >  
> > 
> > 
> >
> ______________________________________________________
> > 123India.com - India's Premier Portal 
> > Get your Free Email Account at
> > http://www.123india.com
> > 
> > 
> > 
> > ------------------------------------------------
> > An alpha version of a web based tool to manage
> > your subscription with this mailing list is at
> > http://lists.linux-india.org/cgi-bin/mj_wwwusr
> 
> 
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Photos - 35mm Quality Prints, Now Get 15 Free!
> http://photos.yahoo.com/
> 
> ------------------------------------------------
> The mailing list archives are available at
> http://lists.linux-india.org/cgi-bin/wilma/linux-delhi

_________________________________________________________
Do You Yahoo!?
Get your free @yahoo.com address at http://mail.yahoo.com