Security Basics mailing list archives

Re: Is there a kernel patch to stop single user mode?


From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Sat, 20 Sep 2003 03:32:41 +0200

On 2003-09-19 John Hebert wrote:
Is there a way to stop someone with physical access to the box from
booting into single user mode and changing the root password? I'm not
interested in solutions that require setting a boot or poweron
password in the BIOS. I'd like something that could be done in the
Linux kernel, so as to apply to multiple platforms.

AFAIK you don't need a kernel patch for that. Just edit your inittab, so
init calls whatever you like it to call instead.

Anyway, I do not recommend this, since single-user-mode is a valuable
measure for troubleshooting a machine. If you want to secure a box I
suggest you rather lock it away.

Regards
Ansgar Wiechers

---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: