recovery from stupid error

Brett Profitt brett at narnarnar.com
Thu Jul 14 08:43:50 CDT 2005


Oliver Grawert wrote:
> why didnt you run a recovery session from the grub bootmenu ? ubuntu
> comes with a predefined set of bootmenu options (accessible by pressing
> esc if grub showns up in the bootprocess) like a memtest or even a
> recovery session that lets you work as root on a broken system.
> no need to add a root account and fiddle with it in X.
> 
> but anyway, this question belongs to ubuntu-users....
> 
> ciao
> 	oli
> 

While on this subject, I must point out that "recovery mode" is wickedly
insecure.  I nearly fell out of my chair when I saw it automatically log
in *as root* with *no password*.  I understand WHY this happens, but
that does not make it any less insecure.

Most of the "solutions" I've seen consider locking grub to be the best
option, which, in my mind, is completely out of the question.  Are there
any plans to correct this gaping security hole in Breezy?

Brett



More information about the ubuntu-devel mailing list