Re: LILO security problem

2000-06-17 Thread John Summerfield
> [[EMAIL PROTECTED]] > > Is there a way to do this without disclosing the password in the > > lilo.conf file?? > > While a mode 600 should suffice, it may be a useful hack for lilo to put > in an md5 or crypt capability (the password checking code isn't part of > the MBR write, is it? If so, th

Re: LILO security problem

2000-06-16 Thread James Manning
[[EMAIL PROTECTED]] > Is there a way to do this without disclosing the password in the > lilo.conf file?? While a mode 600 should suffice, it may be a useful hack for lilo to put in an md5 or crypt capability (the password checking code isn't part of the MBR write, is it? If so, this is certainl

Re: LILO security problem

2000-06-16 Thread Jag
On Fri, 16 Jun 2000, [EMAIL PROTECTED] wrote: > On 15 Jun, [EMAIL PROTECTED] wrote: > > eagle wrote: > > > >> hello, > >> the way out of this is to have even the single user mode of linux password > >> protected > >> to do this > >> login as root and then type liloconf . when you go to liloconf

Re: LILO security problem

2000-06-16 Thread KenSchar
On 15 Jun, [EMAIL PROTECTED] wrote: > eagle wrote: > >> hello, >> the way out of this is to have even the single user mode of linux password >> protected >> to do this >> login as root and then type liloconf . when you go to liloconf set the >> password for single user mode . hope this help >> :-

Re: LILO security problem

2000-06-15 Thread eagle
John Summerfield wrote: > > hello, > > the way out of this is to have even the single user mode of linux password > > protected > > to do this > > login as root and then type liloconf . when you go to liloconf set the > > password for single user mode . hope this help > > :-) > > Bet it does no

Re: LILO security problem

2000-06-15 Thread John Summerfield
> hello, > the way out of this is to have even the single user mode of linux password > protected > to do this > login as root and then type liloconf . when you go to liloconf set the > password for single user mode . hope this help > :-) Bet it does not stop linux init=/bin/bash Better

Re: LILO security problem

2000-06-15 Thread Jeremy Katz
On Thursday, June 15 2000, [EMAIL PROTECTED] said: > Or you can change /etc/inittab so that when entering single user > mode a password is required by using /sbin/sulogin i.e. add this line: > > ~~:S:wait:/sbin/sulogin Not that this stops me from doing 'linux init=/bin/bash' at the lilo prompt.

Re: LILO security problem

2000-06-15 Thread jvanzyl
eagle wrote: > hello, > the way out of this is to have even the single user mode of linux password > protected > to do this > login as root and then type liloconf . when you go to liloconf set the > password for single user mode . hope this help > :-) > You can either add the following lines to

Re: LILO security problem

2000-06-15 Thread eagle
hello, the way out of this is to have even the single user mode of linux password protected to do this login as root and then type liloconf . when you go to liloconf set the password for single user mode . hope this help :-) marco presi wrote: > Dear All, > I found a little big problem in using

Re: LILO security problem

2000-06-10 Thread John Summerfield
> Dear All, > I found a little big problem in using LILO as boot-loader. > When I turn on my pc, if (at LILO prompt) I write > > single > > (where is one of the labels defined in my lilo.conf) a minimal > kernel is loaded, the system starts without asking password and I am able > to change t

Re: LILO security problem

2000-06-10 Thread Greg Wright
*** REPLY SEPARATOR *** On 10/06/00 at 15:31 marco presi wrote: >Dear All, >I found a little big problem in using LILO as boot-loader. >When I turn on my pc, if (at LILO prompt) I write > > single > >(where is one of the labels defined in my lilo.conf) a minimal >kernel is

Re: LILO security problem

2000-06-10 Thread Jag
On Sat, 10 Jun 2000, marco presi wrote: > of my computer. I would like to know if there is a way to disable this > option or to change the string " single" so I'm the only one to > knows it. man lilo.conf The two parameters you're interested in are 'password' and 'restricted' Restricted makes

LILO security problem

2000-06-10 Thread marco presi
Dear All, I found a little big problem in using LILO as boot-loader. When I turn on my pc, if (at LILO prompt) I write single (where is one of the labels defined in my lilo.conf) a minimal kernel is loaded, the system starts without asking password and I am able to change the Root password w