also sprach Ethan Benson (on Tue, 27 Feb 2001 03:42:58PM -0900): > console access to any machine regardless of OS means root rights.
well, sure. > don't set lilo's timeout to 0 that makes it a royal pain to recover > the system if something goes wrong, you can't boot single user any > more and such. > > there is a better solution: > > add to /etc/lilo.conf > > password=s3cr3t > > and to the default kernel image section: > > restricted ... in which case your system would not be remotely rebootable or couldn't recover itself from a kernel panic. > > if this is all taken care off, then you can recover by enabling floppy > > boot and rescueing that system. an attacker would have to open the > > box and reset (or crack) the bios. > > or use the backdoor or backdoor password in the bios. (many of them > have this unfortunatly) that's what i meant with cracking. there isn't a password known for the bioses that i use. martin [greetings from the heart of the sun]# echo [EMAIL PROTECTED]:1:[EMAIL PROTECTED]@@@.net -- a life? where can i download that?