[jaunty] low graphics lets you get root shell with no authentication
Bug #310040 reported by
Dave Gilbert
This bug report is a duplicate of:
Bug #310126: [failsafeXinit] launches gnome-terminal or gedit as root without a password.
Edit
Remove
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ubuntu |
New
|
Undecided
|
Unassigned |
Bug Description
Hi,
At boot I just got an error about ubuntu only being able to start in low graphics mode, it gives me an option to troubleshoot but also gives me an option to start a terminal - it does this with no form of authentication - that doesn't sound safe (especially if there was a way to screw up the X startup via say plugging in a weird monitor).
(This is on a prerelease Jaunty updated today 20th December 2008 - it's failing to get full graphics because it's in a virtualbox and it doesn't seem to have lost the virtualbox driver on an update).
(Bugs 178718 and 190370 both seem to have similar stories but from ages ago that was fixed).
Dave
To post a comment you must log in.
Not sure about your setup, but in general as long as you don't encrypt your harddisk, anyone gaining physical access to your machine will usually be able to boot with a USB stick or a Live CD and through this access all the data on the disk anyway...