[ubuntu-in] bug or what ?? logging into recovery mode without password

[ramnarayan.k at gmail.com]

Hi

Recently i wanted to login into my Ubuntu 7.04 machine into CLI mode - 
not knowing how to do this from the GRUB menu i selected the recovery mode.

It ran through all the start up procedures very quickly and ended up and 
at a root prompt -

so , just to try, using startx i went ahead to see if the GUI would work 
- it did. Showing all the drives mounted and usable

But what *shocked* me was that there was no need for a password (or user 
name) to login.

Was always comfortable that Ubuntu Linux was safe and no one would be 
able to login it without a password.

Its one thing to enable a boo up password but this inherent flaw has me 
wondering -

So is this a bug, and security hole or what. Does this need to be reported

How can this be fixed.

regards
ram