Re: [LI] Linux password security

["Prasad" <Prasad@xxxxxxxxxx>]

One way to avoid a person with AK56 ( with a boot floppy ) is to have a
password protected BIOS setup,  assuming one will not open the machine. And
making the bios look at only BOOT from C drive.

Thanks
Love and regards
Prasad

-----Original Message-----
From: Sharad Joshi <sharadj@xxxxxxxxxxxxxxxx>
To: Benny Mathew <Benny@xxxxxxxxxx>
Cc: linux-india@xxxxxxxxxxxxxxxxxxxxx <linux-india@xxxxxxxxxxxxxxxxxxxxx>
Date: Thursday, October 21, 1999 3:14 PM
Subject: RE: [LI] Linux password security


>On Thu, 21 Oct 1999, Benny Mathew wrote:
>
>+ Does this mean that if a person has physical access to a linux
>+ machine... then there is no security???
>
>In a way, yes (i mean yes to no security). A person carrying a linux boot
>floppy is as dangerous as one with AK56. And moreover if he has a
>perverted bent of mind, he can cause havoc to the system, at the minimum.
>
>+ How can one prevent somebody from booting the system in single user mode
>+ and tampering the files... especially the /etc/passwd file????
>
>I can't really tell how to stop the system from booting in single user
>mode. But one important thing, always maintain a backup copy of
>/etc/passwd (and for that matter - all the important files) in some floppy
>or may be, say, hard copy.
>
>+ Is there any way by which you can make the system to display the Login
>+ screen in single user mode???
>+
>
>No, this would be redundant. Whats the use of this and how different this
>would be from normal user login?
>
>The bottomline is, if others have physical access to your machine,
>available security is not something you will relish.
>
>Sharad.
>-=-=-=-=-=-=-
>
>--------------------------------------------------------------------
>The Linux India Mailing List Archives are now available.  Please search
>the archive at http://lists.linux-india.org/ before posting your question
>to avoid repetition and save bandwidth.
>

--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.