Re: [Cooker] security audit

[scott chevalley]

Levi Ramsey wrote:

On Fri Mar 14 11:52 -0500, Jason Straight wrote:
 

On Friday 14 March 2003 11:11 am, Levi Ramsey wrote:
   

If someone has physical access to the computer they can pass their own
parameters to the kernel, including init=/bin/bash, whcih, bada bing
bada boom, gives them instant root.
     

man lilo - you can restrict it from allowing cmdline, or even booting 
altogether wihout a pw.
   

Still, if someone has physical access to the computer, there's no
stopping them from opening it, removing the drive, mounting it
themselves, and editing the boot-sector to disable the password ;o)
 

or, even more simply, resetting the bios, either by removing the cmos 
battery, or in some computers there is a cmos clear pin header.  short 
the pins and it clears cmos, including passwords....