Re: [POSSIBLE GRAVE SECURITY HOLD]
- To: Martijn van Oosterhout <firstname.lastname@example.org>
- Cc: Samuel Tardieu <email@example.com>, Adam Di Carlo <firstname.lastname@example.org>, "Huneycutt, Doug" <email@example.com>, firstname.lastname@example.org, email@example.com, firstname.lastname@example.org, email@example.com
- Subject: Re: [POSSIBLE GRAVE SECURITY HOLD]
- From: Samuel Tardieu <firstname.lastname@example.org>
- Date: Wed, 2 Feb 2000 13:45:01 +0100
- Message-id: <email@example.com>
- Reply-to: Samuel Tardieu <firstname.lastname@example.org>
- In-reply-to: <389823E6.37B56639@cupid.suninternet.com>; from email@example.com on Wed, Feb 02, 2000 at 11:32:38PM +1100
- References: <firstname.lastname@example.org> <389823E6.37B56639@cupid.suninternet.com>
| Err, there is a mistake here somewhere. If you are getting 1FA at the
| prompt then lilo is *NOT* in the MBR. If it were you would get the lilo
Have you read my mail? If you install Debian with default settings, you will
have a MBR installed in the MBR, not lilo (lilo will be installed on your /
On the contrary with the MBR found on other systems (M$, *BSD, ...), this one
allows the user to press "shift" at boot time: instead of giving lilo a chance
to start, it will allow the user to boot on the floppy disk.
| OTOH, if you have physical access to the machine is there really any
Once again, reread my mail: our machines are physically secured, and the
chances that they are physically breaked in are very low (this would imply
breaking the whole box, and we have cameras and guards looking at them).
However, with this MBR in place, some students did manage to boot on a floppy
and this got unnoticed.