RE: [LI] Linux password security

[Kumar Cheetan A2 5 WIPRO consultant <cheetank@xxxxxxxxxxxxxxxxx>]

> Date: Thu, 21 Oct 1999 15:22:31 +0530 (IST)
> From: Sharad Joshi <sharadj@xxxxxxxxxxxxxxxx>
> To: Benny Mathew <Benny@xxxxxxxxxx>
> cc: linux-india@xxxxxxxxxxxxxxxxxxxxx
> Subject: RE: [LI] Linux password security
> MIME-Version: 1.0
> X-Loop: linux-india@xxxxxxxxxxxxxxxxxxxxx
> X-Url: http://www.linux-india.org
> 
> On Thu, 21 Oct 1999, Benny Mathew wrote:
> 
> + Does this mean that if a person has physical access to a linux
> + machine... then there is no security???
> 
> In a way, yes (i mean yes to no security). A person carrying a linux boot
> floppy is as dangerous as one with AK56. And moreover if he has a
> perverted bent of mind, he can cause havoc to the system, at the minimum.


How about boot passwd at the BIOS and Lilo boot passwd in lilo.conf. This way 
you will be safe unless the person comes back with a screwdriver to open the 
BOX and get ur hdd OR leak bios-cmos :-)

Chetan S


> 
> + How can one prevent somebody from booting the system in single user mode
> + and tampering the files... especially the /etc/passwd file????
> 
> I can't really tell how to stop the system from booting in single user

--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.