[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Hardware advice: seeking echoes of running Linux-PC clusters



Lukas Nellen <lukas@teorica0.ifisicacu.unam.mx> wrote:
> >From the point of view of security, do you really need a diskless
> system? If you set a bios password, set the bios to boot only from C
> and make sure that a password is required to enter single user mode,
> wouldn't that be just as secure? Or is there a loophole which I
> missed (not having tried this type of setup)? 

  There is a loophole if there is a file-system problem on the root
partition.  /etc/init.d/boot will drop you into a root shell if the
root partition has serious errors on it.  Maybe there should be an
option for securing the console which would stop root shells from
popping up on the console without the root password being given.

Neil Turton.
+--------------------------------------------------+----------------------+
| Neil Turton, Assistant computer officer          | Snail Mail to:       |
| Part III mathematics student                     |  Churchill college,  |
| http://www.chu.cam.ac.uk/home/ndt1001/home.html  |  Cambridge. CB3 0DS. |
+--------------------------------------------------+----------------------+
| GCM(M) d H s+:- !g p0>+ !au(-) a- w+ v C+++@ UL++++$(+++) P+ L+++ 3-    |
| E++ N-(+) K- W--- M-- V po Y+ t-- 5 !j R- G? !tv(-) b+ D+ B? e+++ u(*)  |
| h-- f !r>+++ n+ y?                                                      |
+-------------------------------------------------------------------------+


Reply to: