LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 11-27-2004, 11:22 PM   #1
XsuX
Member
 
Registered: Oct 2004
Location: US
Distribution: Fedora Core 1
Posts: 43

Rep: Reputation: 15
Two-factor authentication


OK. This is a really hard question to explain, but maybe it'll provide some people with a cerebral challenge....

I want to use two-factor authentication in booting my box (like this ) where a USB key and a password are required to boot the box. I would like to actually do it myself (if possible and within reason), so I was thinking, could I do something like delete my MBR from my hard drive (please don't flame me if that's a bad thing to do, I am still a recovering Windoze user) and put the MBR on the key and require a password to boot, and then set my BIOS to boot from the USB every time? Is that feasible? If so, how would I go about doing it? Like I said, I really don't know if what I want to do is possible, but it would be cool. Thanks in advance for any help.
 
Old 11-28-2004, 05:13 AM   #2
nukkel
Member
 
Registered: Mar 2003
Location: Belgium
Distribution: Hardened gentoo
Posts: 323

Rep: Reputation: 30
It would be possible... Make a bootable USB keydrive and put the GRUB bootloader on it, GRUB can be instructed to boot anything (like e.g. your hard drive) and to prompt for a password in order to boot at all... Then when you tell the BIOS to boot only from USB it will refuse to boot without the key drive.

However, someone could still make his own bootable keydrive and use that to boot your box. So it's not waterproof... To make it 100% safe you'd probably have to write your own bootloader (on the hard disk) so that it reads e.g. a sector from the USB key drive and sees if it is YOUR key drive. Not easy...!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Authentication service cannot retrieve authentication info Moffett67 Linux - Software 3 12-13-2007 03:16 AM
Small form factor cases/mobos for linux routers Golovko Linux - Hardware 2 12-25-2003 09:29 PM
PF and authentication? german *BSD 0 09-05-2003 11:41 AM
authentication :( sspiro Linux - Newbie 9 06-04-2002 07:04 PM
authentication antken Linux - Networking 4 01-10-2001 10:31 AM


All times are GMT -5. The time now is 11:40 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration