Ubuntu security hole? (not super major, but wondering if it is an issue to report)

Chanchao custom at freenet.de
Wed May 10 04:10:07 UTC 2006


On Tue, 2006-05-09 at 13:08 -0700, Mike Bird wrote:

> The argument was that dropping to a root prompt is no loss of security 
> because, given physical access, one could boot from removable media.
> 
> Dropping to a root prompt is a security hole for those systems which provide 
> keyboard access but which do not permit booting from removable media.

Right, and note that booting from USB or floppy or network or CD can be
disabled in BIOS, that BIOS can be password secured, that the computer
case can be physically locked/secured, and that Grub can be secured. 

Cheers,
Chanchao





More information about the ubuntu-users mailing list