[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#56821: Important security hole: mbr allows anyone to boot from a floppy.

>>>>> "Adam" == Adam Di Carlo <adam@onshore.com> writes:

    Adam> BTW, if you use 'install-mbr -e -F' doesn't that fix matters?

 `install-mbr -e -F -e -A -k -i n DEV' would be better, to disable
 `F'loppy, `A'dvanced mode, and `i'nterrupt with shift key during
 boot.  I think it was decided today to make that the default
 configuration, and let people adjust it to suite themselves by
 running `install-mbr' with whatever switches they like.

    Adam> I really think our best alternative is just to point folks to
    Adam> 'install-mbr' manpage etc.  At this point, I don't want to make
    Adam> radical chnages to the system...

 There ought to be a message about that during installation of `mbr'.

Reply to: