Ubuntu
friendly-recovery package

  1. Bug #220986
  2. Comment #18

Comment 18 for bug 220986

Revision history for this message
Martin Pitt (pitti) wrote : Re: [Bug 220986] Re: friendly-recovery drops to a root shell even when a root password is set

Kevin Funk [2008-06-24 15:48 -0000]:
> > I share the opinion of the reporters: it is a blatant security
> > hole because nobody expects this from a linux system.

Not at all. User/root passwords do not help in *any way* to protect
the system if you have local access and can reboot the machine (or
take the HD out and plug it into a different computer). As Christoph
pointed out, you need disk encryption for that.