Bloggers Wanted
We're looking for people to help with the main blog. If you are consistent, knowledgeable and you're into it, please drop me a note.
|
|
|
|
|
pragerr
 Senior Boarder
Posts: 75 
|
|
How can I prevent users from editing the grub command line and appending the word single to the kernel boot line and thus enabling to get users into su privileged mode? Running RH 8.0 (in this case).
I put a lock line after the title in grub.conf and also a
|
|
The administrator has disabled public write access. |
0Kelvin
Senior Boarder
Posts: 73
|
|
try 'password
|
|
The administrator has disabled public write access. |
paydayloan
Senior Boarder
Posts: 65
|
|
No. A misfortune (of choosing RedHat). Not many people understand the decision (even though some argued for it when I asked in the other group). It's not difficult to change, but to my view leaves a bad taste of Linux especially to many Windoze converts.
Yuan Liu
|
|
The administrator has disabled public write access. |
Etotogeya
 Senior Boarder
Posts: 66
|
|
Can you give the remedy here to change that behaviour?
|
|
The administrator has disabled public write access. |
blueice
Senior Boarder
Posts: 72
|
|
Argh, password, not passwd. Tsk.
|
|
The administrator has disabled public write access. |
soumitra
Senior Boarder
Posts: 63
|
|
In Slackware and gang, the RC script for single user mode makes a call to sulogin. RedHat uses a Sun-like init, but the behaviour can still be modified with RC script. However, I did some google and someone is suggesting a fix in init.
This said, all pointers say when you lose physical security, all defense are off, even grub password (or BIOS password for that matter). But all defense is a deterrant. Doesn't hurt to have another - as long as you don't fall for false sense of security. The ultimate shock from googling? A no-brainer formula to defeat root password: init=/bin/sh passed as kernel parameter.
Turns out kernel has no love for /sbin/init. So if you expect your users to know some grub, don't even bother 'fixing' init. (No matter which distro.)
Yuan Liu
|
|
The administrator has disabled public write access. |
laju
 Senior Boarder
Posts: 67
|
|
Thanks for the insights  |
|
The administrator has disabled public write access. |
|
|
|
