Re: Forgot root

[Brad Bueche <brad bueche com>]

 A Solaris and an HPUX and, I would assume, any Unix box can be accessed
as root if the person has physical access to the box. Any PC can be
accessed if the user has physical access to the box. 

If you dont have physical security, you dont have real security.

If you dont like "linux single", you can turn this option off in the
lilo.conf...but that wont stop somebody with a floppy.

brad
Paul Newman pgen com wrote:
> 
> This is a pretty enormous security hole - doesn't it mean any linux box can be
> cracked if the cracker has physical access (like in offices and stuff?)
> 
> jadaniels2 home com on 23/02/2000 09:42:12
> 
> Please respond to redhat-install-list redhat com
> 
> To:   redhat-install-list redhat com
> cc:
> 
> Subject:  Re: Forgot root
> 
> Joel TAQUEBAN wrote:
> >
> > Suppose I happen to forget root's passwd how do I interrup my system
> > during bootup such I  can go into single user mode, mount the root
> > directory and change the passwd from /etc/passwd?
> >
> > Is there another way of changing the root passwd if I do forget it.
> >
> > Thanks
> > Joel
> 
> Hi Joel
> 
> If you forget root passwood, you can start the machine in single user
> mode as so at the LILO prompt
> 
> LILO  linux single
> 
> this will boot the machine in single user mode and will go directly to
> the shell prompt
> 
> at the prompt, type passwd to change root password.
> 
> Jim
> 
> --
>   PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
>           http://www.redhat.com http://archive.redhat.com
>          To unsubscribe: mail redhat-install-list-request redhat com with
>                        "unsubscribe" as the Subject.
> 
> ________________________ Disclaimer Notice ____________________________
> This E-mail message is private and confidential and should only be read
> by those to whom it is addressed.
> 
> If you are not the intended recipient, you are hereby notified that any
> dissemination, distribution, copying, reproduction, modification or
> publication of this communication is strictly prohibited.  Please delete
> the message from your computer and destroy any copies.
> 
> This message is not intended to be relied upon by any person without
> subsequent written confirmation of its contents.  This company therefore
> disclaims all responsibility and accepts no liability of any kind which
> may arise from any person acting, or refraining from acting, upon the
> contents of the message without having had subsequent written
> confirmation.
> 
> If you have received this communication in error, or if any problems
> occur in transmission please notify us immediately by telephone on
> +44 (0)2476 425474
> 
> --
> To unsubscribe: mail redhat-install-list-request redhat com with
> "unsubscribe" as the Subject.