SliTaz Forum

jmrichardson

Member

Registered: 2013-05-06

Posts: 1

Disable single user mode

Hello,

I would like to disable the ability to boot to single user mode to avoid someone changing the root password.  I am creating a virtual appliance in virtual box and want to prevent someone from changing the root password.  Can this be done in Slitaz?  I am relatively new with linux so the more help you can give, i would appreciate it. 

Thanks in advance,

John

bellard

Administrator

Registered: 2011-03-28

Posts: 657

Re: Disable single user mode

Your bootloader must not allow cmdline editing.

lexeii

Administrator

Registered: 2012-03-21

Posts: 1,853

Re: Disable single user mode

http://en.wikipedia.org/wiki/Runlevel

http://en.wikipedia.org/wiki/Single_user_mode

What a problem? SliTaz not use runlevels, its init not allows any so-called runlevels.

Here is another problem. If you installed (any) OS onto unencrypted partition, anyone can boot other OS, login as root (in that OS), mount your partition, and steal/remove/modify all your secrets, including logins/passwords. Let's say, fake root can modify hash of your root's user password in /etc/shadow to known value, and login as root into your system.

PS. First line of defense is your BIOS Setup. Disable booting from CD/DVD/USB external drives/USB Flash/Cardreader/etc. Set password to your BIOS Setup.

But BIOS Setup can be resetted, or HD can be transplanted to other machine...