Re: Protecting root security

[wcurry@cts.com]

I suppose it you used cfs (as another poster suggested), you could keep
someone from reading your disk.  But you couldn't keep them from
wiping it clean with fdisk and being generally destructive.
I'm not a security guru, but I think it's still one of the most important
rules to remember: physical access = null security.  As I look at the
companies I've worked for in the last few years, they have all 
been aware of this.  I don't think Linux is going to take a hit
for this in the corporate mindset.

Tommy Malloy <tjm1@thorn.net> wrote:

> Doesn't the fact that I can go to any Linux box with an install disk or
> cd and gain root access mean that the all Linux systems are
> fundamentally insecure?   Perhaps the install process could be changed
> so that root password, or some other verification system is required,
> before a reinstall is permitted.  It is true that compromising a system
> this way requires unfettered access to the box.   However as Linux is
> used more and more in commercial environments this issue will need to be
> addressed.
> 
> 
> -- 
> Unsubscribe?  mail -s unsubscribe debian-user-request@lists.debian.org < /dev/null
> 
>