Bug#56821: [POSSIBLE GRAVE SECURITY HOLD]

[tb@mit.edu (Thomas Bushnell, BSG)]

Pierre Beyssac <beyssac@enst.fr> writes:

> The security hole is that the console is made insecure by default
> without any warning from the installation program. That, in itself,
> would warrant a security advisory.

Are you really sure your machines are secure notwithstanding this?  I
doubt it seriously.

Not counting the possibility of physically dinking with the hardware,
are you sure that C-c during bootup won't do the wrong thing?  How
about telling LILO to boot Linux single-user?

Thomas