Security vulnerabilities in default Ubuntu install boot process

Martin Pitt martin.pitt at ubuntu.com
Mon Jan 4 11:43:39 UTC 2010


Crispin Cooper [2009-12-31  1:49 +0000]:
> By default GRUB / GRUB2 will allow anyone who walks up to the computer to
> select 'Recovery Mode' and gain root privileges. This is clearly insecure.

Not really:

https://wiki.ubuntu.com/SecurityTeam/FAQ#Rescue%20Mode

Martin

-- 
Martin Pitt                        | http://www.piware.de
Ubuntu Developer (www.ubuntu.com)  | Debian Developer  (www.debian.org)




More information about the Ubuntu-devel-discuss mailing list