Root password.

yadavankur · 10-02-2002, 06:49 AM

Why is it soooo easy to boot as root using the LILO option Single

.
In our college some guy installed redhat and forgot the password I logged in - in the single mode removed the x written after root: int file /etc/passwd/ and was able to login as root into the GUI,change passwpords and all.

How does one make it more secure.

acid_kewpie · 10-02-2002, 06:59 AM

you set a password for lilo, which is required to enter your own boot options. man lilo

trickykid · 10-02-2002, 10:19 AM

Also make sure to make /etc/lilo.conf only readable by root as well if you set a password or its kind of useless anyone can go in a read the password as it won't be encrypted.

bsdjunkie · 10-02-2002, 11:09 AM

Remember that a pasword for lilo wont stop anyone as well if they have physical access to your box. A boot disk can readily bypass it, or one can take out your HD and mount it on their box and change root. =)

jharris · 10-03-2002, 02:14 AM

You can could also edit your /etc/inittab so it runs the usual getty when you drop to single user mode, that way you still need to login (ala Slackware).

cheers

Jamie...