LXer: Major Linux security hole gapes open
 

Published at LXer:

An old Linux security 'feature' script, which activates LUKS disk encryption, has been hiding a major security hole in plain sight.

Read More...

So, the initrd dropping to a shell when it fails to mount the rootfs is a "gaping major security hole in linux" "just like SSL Heartbleed"?

*sigh* I really must stop reading zdnet articles.

LXer: Major Linux security hole gapes open
 

Seems to me that an encrypted boot could be a good idea... As a bios password...