Recovery root command-line doesn't require password?

[Dngrsone]

So I had to boot into Recovery mode today (Ubuntu 10.04 desktop 64), and selected root command-line.

It dropped me right into a command-line with root privileges without asking me for a password.

Is this normal, or did I somehow break the security on my install?

[tubbygweilo]

Dngrsone, normal as anyone with physical access to your kit can do this. Keep your machine safe and away from prying hands and eyes.

[winh8r]

It is normal for the "drop to root shell prompt" to appear in the recovery mode menu, in order to resolve issues with booting that require root privileges.

As tubbygweilo says, this is where the saying "physical access is root access" comes from.

Every computer system is vulnerable when an unauthorized person has physical access to it regardless of whether or not they have a password.

[Grenage]

So I had to boot into Recovery mode today (Ubuntu 10.04 desktop 64), and selected root command-line.

It dropped me right into a command-line with root privileges without asking me for a password.

Is this normal, or did I somehow break the security on my install?

If you need local file security, you need encryption, or a means of physically securing the machine.

Covering it in cement and placing it in a safe, in a concealed bomb shelter, for example.

[arubislander]

If this behaviour is a cause for concern (as I can imagine it is) it is simple to adjust. After you boot into your normal desktop, open a terminal and type after the prompt:

$> sudo passwd

You will be prompted for your own password to execute the command as root, and then for a password and asked to retype it to confirm. If succesful this will have changed the password for root. From now on when you drop to a root prompt by way of the boot menu you will be asked for the password you just entered.

[Dngrsone]

If you need local file security, you need encryption, or a means of physically securing the machine.

Covering it in cement and placing it in a safe, in a concealed bomb shelter, for example.

If this behaviour is a cause for concern (as I can imagine it is) it is simple to adjust. After you boot into your normal desktop, open a terminal and type after the prompt:

$> sudo passwd

You will be prompted for your own password to execute the command as root, and then for a password and asked to retype it to confirm. If succesful this will have changed the password for root. From now on when you drop to a root prompt by way of the boot menu you will be asked for the password you just entered.

Thanks for that tidbit, arubislander.

My physical security is pretty good, and I'm the only one in the house who knows Linux anyway (everyone else barely knows how to use a mouse), but having that extra little bit of security might save me from something stupid happening by accident.

[cariboo]

Thanks for that tidbit, arubislander.

My physical security is pretty good, and I'm the only one in the house who knows Linux anyway (everyone else barely knows how to use a mouse), but having that extra little bit of security might save me from something stupid happening by accident.

You can still do something stupid running as root too.

[accessgranted]

you can remove the recovery option in the grub boot menu but there is still another point of entry even without entering recovery mode.