On Sun, July 13, 2014 12:18 pm, Alexey Orishko wrote:
> On Sun, Jul 13, 2014 at 12:15 AM, Claus Regelmann <r...@rgc1.inka.de>
> wrote:
>
>> do you really want to disable root access from the console? If you have
>> a simple BLFS system, the console is your local display/keyboard.
>
> I'm aware of consequences. But it's not a system for private use and
> the only access I can get to it is over ssh. The user I'm using is in
> sudoers list.
>
>> Think about that request.
>> You may kick yourself out in case of some repairable errors:
>> e.g. home-partition full
>
> The the only significant changes to the root fs would be system logs,
> which are rotated based on size.
>
> Regards,
> Alexey
> --
> http://lists.linuxfromscratch.org/listinfo/blfs-support
> FAQ: http://www.linuxfromscratch.org/blfs/faq.html
> Unsubscribe: See the above information page
>
>

Hello Alexey,

I was in two minds as to weather to share this, but I think that I will go
ahead.

I have in the past had servers reject the root password, and even for sudo.

I have always been able to get back into them, but you would need 
physical access to the server in question.

When the server boots up, at the grub boot menu, highlight the kernel
entry and press e.  Append single to the end of the line making sure that
there is a space between the last letter of the existing line, and single.

Then pressing enter and then b to boot into single mode.

If that does not work, then you would need to append init=/bin/bash
after single.

Once the start up is completed then you will be dropped directly into the
root shell with no password.  Then it is just a matter of issueing passwd
to create a new password.

The bottom line to this is, if there is physical access available to a
server, then access can be obtained.

This information is documented on the web, and a google search brings it up.

Regards,

Christopher.

-- 
http://lists.linuxfromscratch.org/listinfo/blfs-support
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to