Results 1 to 6 of 6

Thread: How to password-protect root.

  1. #1
    Join Date
    Jun 2013
    Location
    Somewhere on Earth.
    Beans
    516
    Distro
    Ubuntu 14.04 Trusty Tahr

    Arrow How to password-protect root.

    Hello all!

    I have heard that if you go in recovery mode you can use "Drop to root-shell prompt" to preform administrative tasks (no password).
    Is there a way to password-protect root (or recovery entries)? Security is a priority here.
    -Jonathan
    Status: CELEBRATING 2016!!! (Offline )

  2. #2
    Join Date
    Feb 2008
    Location
    Oblivion
    Beans
    Hidden!
    Distro
    Xubuntu

    Re: How to password-protect root.

    Thread moved to Security Discussions.

    You'll probably have more luck here.

  3. #3
    Join Date
    Apr 2011
    Location
    Mystletainn Kick!
    Beans
    7,603
    Distro
    Ubuntu

    Re: How to password-protect root.

    You can either set up a grub2 password, in which case you set passwords and users(vice versa) per situation.
    Or an easier, yet one prone with possible problems is to edit the /etc/default/grub file and uncomment the line
    GRUB_DISABLE_RECOVERY="true".
    Doing so will remove the recovery option from grub.
    It'll also make trying to run recovery mode very hard, if even possible.
    Grub2 Password

    Edit: And can we please avoid the inevitable moving of goal posts here(ie what if the perp uses a live cd, then change the bios settings, and then what if the perp resets the bios, etc etc)
    Last edited by deadflowr; September 2nd, 2013 at 05:44 PM.
    Splat Double Splat Triple Splat
    Earn Your Keep
    Don't mind me, I'm only passing through.
    Once in a blue moon, I'm actually helpful
    .

  4. #4
    Join Date
    May 2007
    Location
    The New Forest
    Beans
    Hidden!
    Distro
    Xubuntu

    Re: How to password-protect root.

    Have a look through here - https://help.ubuntu.com/community/RootSudo

  5. #5
    Join Date
    Mar 2011
    Beans
    680

    Re: How to password-protect root.

    Edit: And can we please avoid the inevitable moving of goal posts here(ie what if the perp uses a live cd, then change the bios settings, and then what if the perp resets the bios, etc etc)
    Why?

    This is about protecting against physical access. Setting a password like this is just a stupid and trivially bypassed way to do this, and it would be wrong not to explain that.

    Yes, they have physical access, write access to the device, read access, etc - grub is irrelevant. If you want to prevent someone with physical access to the device from accessing data you need encryption. That's all there is to it.
    sig

  6. #6
    Join Date
    Nov 2008
    Location
    S.H.I.E.L.D. 6-1-6
    Beans
    Hidden!
    Distro
    Ubuntu Development Release

    Re: How to password-protect root.

    Quote Originally Posted by Jonathan Precise View Post
    Hello all!

    I have heard that if you go in recovery mode you can use "Drop to root-shell prompt" to preform administrative tasks (no password).
    Is there a way to password-protect root (or recovery entries)? Security is a priority here.
    Encrypted LVM (LUKS)

    There should be an option in the Ubuntu installer to select that.
    Don't waste your energy trying to change opinions ... Do your thing, and don't care if they like it.

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •