[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to avoid meltdowns in the future



On Thu, Jun 27, 2002 at 06:06:30PM -0230, Michael D. Crawford wrote:
| >This seems silly. Is there an easy/accessible way, preferably through
| >LILO, to boot into single-user mode with few, if any, daemons running?
 
| However, a preferable option is to use GNU Grub,

I prefer grub too, but all you need to do (in either case, grub or
lilo) is add
    init=/bin/sh
to your kernel command line.  The root partition will be mounted ro
and instead of running /sbin/init (like usual) which goes through your
init script, the kernel will start /bin/sh as the parent process.
Thus you'll have a root shell with _nothing_ started up.  You can then
remount the root partition and do what you need to do, then reboot.
I've needed to use this feature a few times before.  Obviously,
though, this provides a (potential) way for an unauthorized user with
console access to obtain root privileges and change the password (or
do whatever).  With grub you can protect against this by requiring a
password to do anything other than select certain predefined entries.

-D

-- 

One OS to rule them all, one OS to find them,
One OS to bring them all and in the darkness bind them,
In the Land of Redmond, where the Shadows lie.
 
http://dman.ddts.net/~dman/

Attachment: pgpRr1kt36P9X.pgp
Description: PGP signature


Reply to: