[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: SECURITY PROBLEM: autofs [all versions]



On Sat, Jul 01, 2000 at 10:19:39AM +0200, Thor <thor@tech-center.com> was heard to say:
> if you have physical access to the console and floppy drive you can always 
> start with a boot + root floppy, mount the hard disk and modify the 
> mounted /etc/passwd file ... this is an old trick, usefull when you 
> loose the root password ;-)

  ..unless, of course, the machine's owner has disabled floppy boots..in which
case, you have to open the thing up and reset the BIOS; if the machine is in
an environment with someone watching what's going on (eg, a school computer
lab), this is fairly suspicious behavior and likely to bring unwanted
attention..

  Daniel

-- 
/----------------- Daniel Burrows <Daniel_Burrows@brown.edu> -----------------\
|     If you're reading    |    Wisdom is one of the few things               |
|    this, you have too    |    that looks bigger the farther away it is.     |
|      much free time.     |      -- Terry Pratchett                          |
\----------------- The Turtle Moves! -- http://www.lspace.org ----------------/



Reply to: