[Bug 801337] Re: One can get root access if there is an error in the boot process

Kees Cook kees at ubuntu.com
Thu Jun 23 20:58:04 UTC 2011


Thanks for taking the time to report this bug and helping to make Ubuntu better.  This is not a bug, but rather expected behavior:
https://wiki.ubuntu.com/SecurityTeam/Policies#Reasonable%20Physical%20Access

Please feel free to report any other bugs you may find.

** Visibility changed to: Public

** This bug is no longer flagged as a security vulnerability

** Changed in: plymouth (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to plymouth in Ubuntu.
https://bugs.launchpad.net/bugs/801337

Title:
  One can get root access if there is an error in the boot process

Status in “plymouth” package in Ubuntu:
  Invalid

Bug description:
  When booting, if there are errors, for example when mounting file
  systems, then there are cases when it drops to a root prompt. This is
  a very dangerous security bug, as even if one has set up a bios and/or
  bootloader password and otherwise has a safe system it is still
  possible for an attacker to gain root access to the system by
  exploiting errors there may be with the boot process.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/plymouth/+bug/801337/+subscriptions




More information about the foundations-bugs mailing list