Results 1 to 6 of 6

Thread: How to password-protect root.

  1. #1
    Join Date
    Jun 2013
    Location
    Somewhere on Earth.
    Beans
    345
    Distro
    Ubuntu 13.10 Saucy Salamander

    Arrow How to password-protect root.

    Hello all!

    I have heard that if you go in recovery mode you can use "Drop to root-shell prompt" to preform administrative tasks (no password).
    Is there a way to password-protect root (or recovery entries)? Security is a priority here.
    I recommend a full ubuntu installation rather than a wubi install. Ask me why.
    To migrate from wubi, click here. (by bcbc)
    Status: Online
    https://help.ubuntu.com/community/UEFI, and Buggy UEFI solution.

  2. #2
    Join Date
    Feb 2008
    Location
    Planet earth, for now.
    Beans
    Hidden!
    Distro
    Xubuntu

    Re: How to password-protect root.

    Thread moved to Security Discussions.

    You'll probably have more luck here.

  3. #3
    Join Date
    Apr 2011
    Location
    Mystletainn Kick!
    Beans
    4,146
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: How to password-protect root.

    You can either set up a grub2 password, in which case you set passwords and users(vice versa) per situation.
    Or an easier, yet one prone with possible problems is to edit the /etc/default/grub file and uncomment the line
    GRUB_DISABLE_RECOVERY="true".
    Doing so will remove the recovery option from grub.
    It'll also make trying to run recovery mode very hard, if even possible.
    Grub2 Password

    Edit: And can we please avoid the inevitable moving of goal posts here(ie what if the perp uses a live cd, then change the bios settings, and then what if the perp resets the bios, etc etc)
    Last edited by deadflowr; September 2nd, 2013 at 05:44 PM.
    Splat Double Splat Triple Splat
    Earn Your Keep
    Don't mind me, I'm only passing through.
    Once in a blue moon, I'm actually helpful
    .

  4. #4
    Join Date
    May 2007
    Location
    The New Forest
    Beans
    Hidden!
    Distro
    Xubuntu Development Release

    Re: How to password-protect root.

    Have a look through here - https://help.ubuntu.com/community/RootSudo
    Forum Social IRC Channel
    Xubuntu IRC Support
    Xubuntu Support

    Please do not PM me about Registration issues without having been asked to. I will tell you to post here

  5. #5
    Join Date
    Mar 2011
    Beans
    665

    Re: How to password-protect root.

    Edit: And can we please avoid the inevitable moving of goal posts here(ie what if the perp uses a live cd, then change the bios settings, and then what if the perp resets the bios, etc etc)
    Why?

    This is about protecting against physical access. Setting a password like this is just a stupid and trivially bypassed way to do this, and it would be wrong not to explain that.

    Yes, they have physical access, write access to the device, read access, etc - grub is irrelevant. If you want to prevent someone with physical access to the device from accessing data you need encryption. That's all there is to it.

  6. #6
    Join Date
    Nov 2008
    Location
    BSAA Headquarters
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: How to password-protect root.

    Quote Originally Posted by Jonathan Precise View Post
    Hello all!

    I have heard that if you go in recovery mode you can use "Drop to root-shell prompt" to preform administrative tasks (no password).
    Is there a way to password-protect root (or recovery entries)? Security is a priority here.
    Encrypted LVM (LUKS)

    There should be an option in the Ubuntu installer to select that.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •