Ubuntu QA:
BlogBrainstorm
Log in
Ubuntu QA
The Ubuntu community has contributed 8347 ideas, 36569 comments, 875408 votes

Idea #7300: password protected recovery mode



bug This idea is a duplicate of idea #5799: Graphical Recovery Mode.
up
34
down
Written by Runn3r.cZe the 20 Apr 08 at 18:16. Category: Security. Status: New
Description
when i choose a recovery mode in grub, it automatically log me in as root. i find this very dangerous, because anyone can restart the computer, start recovery mode a make some critical changes in my system...
i'd like to see the recovery mode protected somehow


Attachments
No attachments.


Duplicates


Comments
Rioting_Pacifist wrote on the 20 Apr 08 at 18:41
Its better to warn, people for most people recovery is a good way to recover the system if you forget your password.

moderatelymodest wrote on the 20 Apr 08 at 20:15
You could add a boot password in the bios settings.

This would solve this and other similar security problems, if you're paranoid. (ie booting a live cd or similar and making changes)

Warbo wrote on the 20 Apr 08 at 20:25
This can be done by password protecting GRUB.

Set GRUB to boot in normal mode by default, then add a password so recovery mode cannot be chosen without it.

peterjs wrote on the 20 Apr 08 at 23:02
The point of recovery mode is to recover you're system. One of the things you could want to recover from is a lost password. If you're really that concerned about security, keep in mind the first rule of security, if the attacker has physical access, you can't stop them, only slow them down and hope they give up.

Manos wrote on the 25 Apr 08 at 15:37
I think idea "#5799: Graphical Recovery Mode" fixes this problem.


Post your comment