Bug#129988: S/390: secure install with a password?
Package: boot-floppies
Version: 3.0.17-2001-11-18
Severity: wishlist
Tags: security
[This is with the old boot-floppies, can't see if it is fixed.
Changelog says:
"- s390: don't modify etc/passwd on the initrd any longer"]
When installing Debian on S/390, you boot and have only minimal
console support, just to set networking up.
After that, you telnet into the box and the first session starts the
rest of the install. Any other connect gives a root prompt without
asking for a password - so any user in your net may drop into the
system and screw up your installation.
Caiman asks for a new password and start inetd only after stat. I
think, that should be how it is done.
Jochen
-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux jupiter 2.4.17 #1 Sam Jan 5 19:50:56 CET 2002 i686
Locale: LANG=de_DE, LC_CTYPE=de_DE
Reply to: