Re: boot loader

[Tom <tom@lemuria.org>]

On Tue, Apr 23, 2002 at 12:45:03AM +0200, Russell Coker wrote:
> /etc/lilo.conf will (on any properly configured system) contain a boot 
> password for the system, which is the best way of taking over a system 
> entirely without disassembling the hardware.  I think that this deserves a 
> different type to world-readable files such as /etc/passwd!
> 
> I think that the situation is similar for other boot loaders.

Physical access to the hardware always means you have lost (an
encrypted filesystem being the exception). Moreover, a lot of properly
configured systems do NOT have a boot password. If they are located in
a physical secure location, then coming up again after a crash or power
failure is more important than the off-chance that someone breaks into
the hosting center just to reboot and take over your machine.


-- 
http://web.lemuria.org/pubkey.html
pub  1024D/D88D35A6 2001-11-14 Tom Vogt <tom@lemuria.org>
     Key fingerprint = 276B B7BB E4D8 FCCE DB8F  F965 310B 811A D88D 35A6

--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.