Security Basics: Re: Is there a kernel patch to stop single user mode?

[Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>]

On 2003-09-19 John Hebert wrote:
> Is there a way to stop someone with physical access to the box from
> booting into single user mode and changing the root password? I'm not
> interested in solutions that require setting a boot or poweron
> password in the BIOS. I'd like something that could be done in the
> Linux kernel, so as to apply to multiple platforms.
AFAIK you don't need a kernel patch for that. Just edit your inittab, so
init calls whatever you like it to call instead.

Anyway, I do not recommend this, since single-user-mode is a valuable
measure for troubleshooting a machine. If you want to secure a box I
suggest you rather lock it away.

Regards
Ansgar Wiechers

---------------------------------------------------------------------------
----------------------------------------------------------------------------