LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 07-13-2011, 03:38 PM   #1
infinite_scale
Member
 
Registered: Feb 2011
Location: NCR, Uttar Pradesh, India
Posts: 74

Rep: Reputation: 1
No prompt for root password after attempting to enter single user mode


I followed instructions to enter single user mode by adding single at the end of kernel line but after that it doesn't ask for root password but brings up the sh# prompt. Isn't that supposed to be insecure?

I understand for this the grub password can be applied but even after adding "single" it should ask for root password..or it should not..??
 
Old 07-13-2011, 03:44 PM   #2
snowpine
Senior Member
 
Registered: Feb 2009
Posts: 4,037

Rep: Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099Reputation: 1099
It is a recovery mode that you can use to reset a forgotten root password.

It's only a security flaw if you give strangers physical access to your computer.
 
Old 07-13-2011, 04:55 PM   #3
frieza
Senior Member
 
Registered: Feb 2002
Location: harvard, il
Distribution: Ubuntu 11.4,DD-WRT micro plus ssh,lfs-6.6,Fedora 15,Fedora 16
Posts: 3,200

Rep: Reputation: 397Reputation: 397Reputation: 397Reputation: 397
single user mode spawns a root shell, it doesn't invoke a login process
even IF the single user boot prompted for a login nothing other then a grub password would stop someone from say adding
Code:
init=/bin/bash
and then re-mounting / as rw instead of single and achieving essentially the same effect.
or booting from a live cd, chroot the live install, change root password, and/or grub password

in short, no matter what, physical access trumps any extra layers of security that may be in place
 
1 members found this post helpful.
Old 07-30-2011, 10:51 AM   #4
infinite_scale
Member
 
Registered: Feb 2011
Location: NCR, Uttar Pradesh, India
Posts: 74

Original Poster
Rep: Reputation: 1
Thanks snowpine and frieza. The info is really helpful and certainly i agree.. that is a security flaw.. Preventing physical access is very important.. :-)
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
unique problem in resetting root password in suse linux in single user mode & rescue amit_kalipur Linux - Security 1 07-14-2009 02:41 PM
Password prompt in single user mode tommyr1216 Fedora 1 05-30-2008 01:42 PM
enable password for single user mode cyrulo Linux - Security 3 02-28-2007 01:14 AM
password for single user mode V Naveen Linux - General 1 11-24-2006 06:27 AM
Slackware's Single User Mode requires root password too? StevenO Slackware 2 01-25-2006 09:28 PM


All times are GMT -5. The time now is 04:25 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration