LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-03-2010, 01:44 AM   #1
ottoshmidt
LQ Newbie
 
Registered: Apr 2010
Posts: 2

Rep: Reputation: 0
linux boot security concerns


edit boot options and add line "init=/bin/bash". Boot will log into a root account directly. Just like that ?!

I see that physical access means everything but you at least need a livecd to hack windows password. AFAIK


any ideas about that?
 
Old 04-03-2010, 01:55 AM   #2
Mr-Bisquit
Member
 
Registered: Feb 2009
Distribution: FreeBSD, OpenBSD, NetBSD, Debian, Fedora
Posts: 770
Blog Entries: 52

Rep: Reputation: 68
First thing, you're doing this from your own computer. Are you also allowing unrestricted remote logins?
Are you foolishly running sudo and allowing your user passwords to be openly stored?

This move of yours ranks up there with
Code:
sudo rm -rf /*
.
 
Old 04-03-2010, 01:55 AM   #3
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by ottoshmidt View Post
edit boot options and add line "init=/bin/bash". Boot will log into a root account directly. Just like that ?!

I see that physical access means everything but you at least need a livecd to hack windows password. AFAIK


any ideas about that?
Addressing this is simply a matter of configuring your bootloader's security options according to your needs.

And yes, physical access means Game Over on any OS.

BTW, I've changed the thread title to something less sensationalistic.

Last edited by win32sux; 04-03-2010 at 02:31 AM.
 
Old 04-03-2010, 02:02 AM   #4
10110111
Member
 
Registered: Jun 2008
Location: St.-Petersburg, Russia
Distribution: (B)LFS, Ubuntu, SliTaz
Posts: 403

Rep: Reputation: 51
Quote:
edit boot options and add line "init=/bin/bash".
Set password in GRUB and be happy %) .
 
Old 04-03-2010, 02:09 AM   #5
rudra
LQ Newbie
 
Registered: Sep 2006
Location: Germany
Distribution: redhat
Posts: 2

Rep: Reputation: 0
But you can't edit boot options; unless you are permitted. It is a general practice, that you protect your GRUB with password.

Thanks
Rudra

Quote:
Originally Posted by ottoshmidt View Post
edit boot options and add line "init=/bin/bash". Boot will log into a root account directly. Just like that ?!

I see that physical access means everything but you at least need a livecd to hack windows password. AFAIK


any ideas about that?
 
Old 04-03-2010, 02:22 AM   #6
Absent Minded
Member
 
Registered: Nov 2007
Location: Washington State U.S.A.
Distribution: Debian testing
Posts: 74

Rep: Reputation: 21
Quote:
Originally Posted by ottoshmidt View Post
edit boot options and add line "init=/bin/bash". Boot will log into a root account directly. Just like that ?!

I see that physical access means everything but you at least need a livecd to hack windows password. AFAIK


any ideas about that?
Yes, on a system that has been unsecurly setup it is that easy. Just as a side note, things can be done to Windows too to make it as vonerable when one has "phisical" access to your computer. As already suggested, set a boot password in GRUB or LILO (or whatever bootloader you want to use). You can make things more secure from the average Joe Cracker by setting a BIOS password and disable booting from "other" devices. You will need to find some means of securing/locking your computer case as well. Using encripted file systems is also benificial. However, (as already pointed out) once a cracker has phisical access to your computer the game IS over. These things just slow them down a little. It doesn't matter what OS you are using the end result is the same... phisical access = access to everything.
 
Old 04-03-2010, 07:49 AM   #7
ottoshmidt
LQ Newbie
 
Registered: Apr 2010
Posts: 2

Original Poster
Rep: Reputation: 0
thanks for answers
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Wireless Network Security Concerns marnold Linux - Security 12 04-13-2008 04:28 PM
Web/Email Server, but some security concerns montag Slackware 3 02-26-2008 01:39 PM
kwallet and konqueror security concerns 40mdxer Linux - Security 1 01-01-2008 08:19 AM
Noob Admin, security concerns Linuxfrog Linux - Security 4 11-26-2006 03:29 AM
MRTG: security concerns? registering Linux - Security 2 08-07-2003 06:56 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:34 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration