Ubuntu
friendly-recovery package

  1. Bug #220986
  2. Comment #3

Comment 3 for bug 220986

Revision history for this message
Ernst Kloppenburg (ernst-kloppenburg) wrote :

The maintainers consider it a feature!!! This "bug" has been reported earlier, e.g. #10662, more than three years ago.

I share the opinion of the reporters: it is a blatant security hole because nobody expects this from a linux system.

There are more security holes like that when you can edit the boot command line.

Maybe grub should be password protected by default?