Bug#603848: [Squeeze Beta1] Successful installation - but one security question
Package: installation-reports
Boot method: netinst cd
Image version: squeeze testing beta1
Date: 17.Nov. 2010 20:00
Machine: High-reliability industry pc 'Siemens IL40'
Processor: Pentium4 2,4 GHz
Memory: 512 MB
Partitions: output of df -Tl:
Filesystem Type 1K-blocks Used Available Use% Mounted on
/dev/sda1 ext4 5169540 2169328 2737608 45% /
tmpfs tmpfs 257064 0 257064 0% /lib/init/rw
udev tmpfs 252736 172 252564 1% /dev
tmpfs tmpfs 257064 0 257064 0% /dev/shm
/dev/sda6 ext4 13417584 184608 12551404 2% /home
/dev/sdb1 vfat 245129 40305 204825 17% /media/floppy0
Output of lspci -knn:
00:00.0 Host bridge [0600]: Intel Corporation 82845G/GL[Brookdale-G]/GE/PE DRAM Controller/Host-Hub Interface [8086:2560] (rev 03)
Subsystem: Fujitsu Technology Solutions Device [1734:1003]
Kernel driver in use: agpgart-intel
00:01.0 PCI bridge [0604]: Intel Corporation 82845G/GL[Brookdale-G]/GE/PE Host-to-AGP Bridge [8086:2561] (rev 03)
00:1d.0 USB Controller [0c03]: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) USB UHCI Controller #1 [8086:24c2] (rev 02)
Subsystem: Fujitsu Technology Solutions D1451 Mainboard (SCENIC N300, i845GV) [1734:1004]
Kernel driver in use: uhci_hcd
00:1d.1 USB Controller [0c03]: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) USB UHCI Controller #2 [8086:24c4] (rev 02)
Subsystem: Fujitsu Technology Solutions D1451 Mainboard (SCENIC N300, i845GV) [1734:1004]
Kernel driver in use: uhci_hcd
00:1d.2 USB Controller [0c03]: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) USB UHCI Controller #3 [8086:24c7] (rev 02)
Subsystem: Fujitsu Technology Solutions D1451 Mainboard (SCENIC N300, i845GV) [1734:1004]
Kernel driver in use: uhci_hcd
00:1d.7 USB Controller [0c03]: Intel Corporation 82801DB/DBM (ICH4/ICH4-M) USB2 EHCI Controller [8086:24cd] (rev 02)
Subsystem: Fujitsu Technology Solutions D1451 Mainboard (SCENIC N300, i845GV) [1734:1004]
Kernel driver in use: ehci_hcd
00:1e.0 PCI bridge [0604]: Intel Corporation 82801 PCI Bridge [8086:244e] (rev 82)
00:1f.0 ISA bridge [0601]: Intel Corporation 82801DB/DBL (ICH4/ICH4-L) LPC Interface Bridge [8086:24c0] (rev 02)
00:1f.1 IDE interface [0101]: Intel Corporation 82801DB (ICH4) IDE Controller [8086:24cb] (rev 02)
Subsystem: Fujitsu Technology Solutions D1451 Mainboard (SCENIC N300, i845GV) [1734:1004]
Kernel driver in use: ata_piix
00:1f.3 SMBus [0c05]: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) SMBus Controller [8086:24c3] (rev 02)
Subsystem: Fujitsu Technology Solutions D1451 Mainboard (SCENIC N300, i845GV) [1734:1004]
Kernel driver in use: i801_smbus
00:1f.5 Multimedia audio controller [0401]: Intel Corporation 82801DB/DBL/DBM (ICH4/ICH4-L/ICH4-M) AC'97 Audio Controller [8086:24c5] (rev 02)
Subsystem: Fujitsu Technology Solutions Device [1734:0088]
Kernel driver in use: Intel ICH
01:00.0 VGA compatible controller [0300]: Matrox Graphics, Inc. MGA G400/G450 [102b:0525] (rev 85)
Subsystem: Matrox Graphics, Inc. Millennium G450 32Mb SDRAM Dual Head [102b:0641]
Kernel driver in use: matrox_w1
02:08.0 Ethernet controller [0200]: Intel Corporation 82801DB PRO/100 VM (LOM) Ethernet Controller [8086:103b] (rev 82)
Subsystem: Fujitsu Technology Solutions Device [1734:1002]
Kernel driver in use: e100
Base System Installation Checklist:
[O] = OK, [E] = Error (please elaborate below), [ ] = didn't try it
Initial boot: [O]
Detect network card: [O]
Configure network: [O]
Detect CD: [O]
Load installer modules: [O]
Detect hard drives: [O]
Partition hard drives: [O]
Install base system: [O]
Clock/timezone setup: [O]
User/password setup: [O]
Install tasks: [O]
Install boot loader: [O]
Overall install: [O]
Comments/Problems:
Installation without any problems!
I installed from netinst-cd combined with a german mirror, I used the
graphical installer, desktop environment LXDE was chosen, grub2 was
installed in the MBR (nice grub boot menu screen!).
I have one security related question:
I selected, that the root account should be deactivated, and the first
regular user receives administrative rights via sudo.
This works so far.
But if I start the machine via the "recovery mode" entry in the grub
menu (runlevel 1), I get a root (!) shell without beeing asked for
any password!!!
("sulogin: root account is locked, starting shell")
Is this correct and intended?
Thanks for your work!
Holger
--
= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Created with Sylpheed 2.5.0
under DEBIAN GNU/LINUX 5.0.0 - L e n n y
Registered LinuxUser #311290 - http://counter.li.org/
= = = = = = = = = = = = = = = = = = = = = = = = = = = = = = =
Reply to: