I created a workaround for this:
http://jhansonxi.blogspot.com/2010/12/slightly-less-open-ubuntu-recovery-mode.html
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.
https://bugs.launchpad.net/bugs/21994
Title:
Booting in recovery mode
I think we should answer some security questions to Recovery Mode before
you are granted 'root' access the first user (the person who
installed the operating system) could fill in the details upon
installation.
e.g
Mothers Maiden Name?
Last School Attended
--
Booting in recovery mode must as
Booting with init=/bin/sh could be prevented by a bootloader password.
You have in fact just given an excellent example of why a bootloader
password is required if you are in an environment where this issue
matters; init=/bin/sh completely bypasses any "protection" we might
apply to recovery mode.
How do you boot with init=/bin/sh ? Couldn't it be prohibited by
administrator? Most computer's BIOS lets you restrict which media can be
used for boot. What is the point to ask password when normal user logs
in Ubuntu, if you can log in as root without a password?
--
Booting in recovery mode mus
