On Tue, May 13, 2008 at 8:40 PM, senthilraja P wrote:
>  I installed edubuntu fiesty, and later on forgot the password.  In a guess,
>  i tried in recovery mode, and i got the shell prompt.  I attempted to edit
>  the passwd and shadow file, and to my surprise i was able to update it.
>  Then later on i rebooted and logged in normal way.
>
>  now i am wondering, that the security of the system would be compromised.
>
>  is ubuntu devised in such a way?  Or is there any other way to protect the
>  system?

I think this method of password recovery works on several
distributions; wherein you can boot into single user mode and recover
your password. While there may be ways to switch this off, real
security is only if you make your system physically inaccessible to
others. For all you know, even if you do switch this off, someone can
come with a Live CD and achieve the same effect, right? :-)

However, I would also be interested in knowing a way to switch this off.

Thanks.

Kumar
-- 
Kumar Appaiah,
458, Jamuna Hostel,
Indian Institute of Technology Madras,
Chennai - 600036
_______________________________________________
To unsubscribe, email [EMAIL PROTECTED] with 
"unsubscribe <password> <address>"
in the subject or body of the message.  
http://www.ae.iitm.ac.in/mailman/listinfo/ilugc

Reply via email to