[LI] Re: Linux India Digest V1 #514

[sanjeev V <jiggyshome@xxxxxxxxx>]

FIX FOR SINGLE USER SECEURITY PROBLEM
=====================================
To prevent users from booting in  LINUX SINGLE from
lilo prompt
add the following lines at the end of rc.sysinit in
the /etc/rc.d dir of
Redhat Linux.

if grep -i single /proc/cmdline >/dev/null ; then
	sulogin
	init 5
fi
This should work for redhat and on LINUX single U will
be prompted
for root passwd failing which it boots to init 5.
Dont forget to change CMOS setting to boot only from
HDD and
set a CMOS passed.
In case of a different distribution add these lines to
the first
script executed by init.

U can still access a shell by typing "LINUX
init=/bin/sh" at LILO Prompt.
to prevent this open /etc/lilo.conf and add the line

image = /boot/vmlinuz
  label = linux
  vga = normal
  password=yourpass

  where yourpass is the password.

  makesure lilo.conf is readable only by root.
  i.e. chmod 600 /etc/lilo.conf
after all this type lilo at shell prompt.
but this again is a problem in a student lab as the
instructor has to
type the password everytime a work station is started
or restarted.
Date: Sun, 16 Jan 100 16:07:57 +0530 (IST)
From: Public Domain SoftWare
<pdsw@xxxxxxxxxxxxxxxxxxx>
Subject: Re: [LI] Re: restrict linux from booting in
single user

> user mode by passing linux 1  or linux single at
lilo prompt.  This
can be
> a threat if some mischevious knows and uses the
system and you can't
bank
> on everyone being sincere...  I wish to know if
there is a way out to
> disable the linux box from booting in single user
mode by passing
parameters.

i think there is some option whereby you can ensure
password to be
asked for
while booting in single user mode. i think some option
in lilo.conf,
but that
password will be in plaintext, so make lilo.conf
read/write only to
root.

otherwise also i feel that the option for asking
password in single
user
mode is still there.

and, disable floppy drive from CMOS and protect CMOS
setup with a
password.







The driver provided for sis6215c inredhat 6.1 of PCQ
cd does not
work properly.install the XF86_SVGA*.rpm from some
other copy like
the RH5.2 or RH6 cds and configure the card using
XF86Setup.
this should work.

From: gagan sawant <gagansawant@xxxxxxxxxxx>
To: <linux-india@xxxxxxxxxxxxxxxxxxxxx>
Sent: Sunday, January 16, 2000 10:44 AM
Subject: [LI] SIS 6215C Display Driver


> Sir,
>
> I wanted to install LINUX 6.1 on a machine with the
SIS 6215C display
card.
> It did not get installed as the driver is not there
for the card.
Please
> provide with the Solution.
>
> Regards,
> Gagandeep Sawant

__________________________________________________
Do You Yahoo!?
Talk to your friends online with Yahoo! Messenger.
http://im.yahoo.com
--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.