Baslinux mailing list

[Neo Sze Wee <neoszewee AT gmx.net>]

On Sat, Jun 28, 2003 at 11:07:49PM +0000, Day Brown wrote:
> qwms-avib AT dea.spamcon.org wrote:
> > 
> > Day Brown wrote:
> > >
> > > the sabotage software will never think to look for
> > > your dos drive, whose boot could be off a FD with the
> > > write tab shut.  Let them try to figure out how to write
> > > to a locked floppy.
> > 
> > It's even simpler than that.  Delete /dev/hda1 from Linux
> > and it won't be able to mount your C: drive.  So you can
> > boot Linux from C: without exposing it.  If you also delete
> > fdisk (and similiar) from Linux, then your C: drive is pretty
> > safe from anything Linux could do.
> Well that's pretty kewl. 
> But with root, most distros tell you not to run it. Slackware 7 pops up
> this huge warning across the screen. Mandrake sets the background to
> bright red. To newbies, this is intimidating, as perhaps it should be.
> Surfing as root is reportedly dangerous.
> 
> But with BL, and techniques like you cite above, which consider using
> another os to store your personal data, the risk of surfing as root seem
> trivial.
> 
> Given all the Linux postings about 'permissions', 'chown', shutdown...
> all from single user desktops, you'd think the other distro programmers
> wouldda picked up on what pisses people off by now.

As I said in a previous post, change inittab to get rid of these
problems:

<prompt> cat /etc/inittab
+---------------------------------------------------------------------
| # /etc/inittab
| # Boot-time system configuration/initialization script.
| # This is run first except when booting in single-user mode.
| ::sysinit:/etc/rc.d/rc.S
| 
| # Login /bin/sh invocations on selected ttys.
| #
| # Start a shell on the console
| ::respawn:-/bin/sh
^^^^^^^^^^^^^^^^^^^^^
| # Start an "askfirst" shell on tty2 and tty3
| tty2::askfirst:-/bin/sh
^^^^^^^^^^^^^^^^^^^^^^^^^^^^
| #tty3::askfirst:-/bin/sh
| 
| # /sbin/getty invocations for selected ttys.
| #
| #tty1::respawn:/sbin/getty 38400 tty1
| #tty2::respawn:/sbin/getty 38400 tty2
| 
| # Example of how to put a getty on a serial line (for a terminal)
| #
| #ttyS0::respawn:/sbin/getty -L ttyS0 9600 vt100
| #ttyS1::respawn:/sbin/getty -L ttyS1 9600 vt100
| #
| # Example how to put a getty on a modem line.
| #ttyS2::respawn:/sbin/getty -x0 -s 57600 ttyS2
| 
| # Reboot when ctrl-alt-del keys are pressed. 
| #::ctrlaltdel:/sbin/reboot 
| #::ctrlaltdel:/sbin/brc
| 
| # Stuff to do before halting or rebooting.
| ::shutdown:/sbin/swapoff -a >/dev/null 2>&1 
| ::shutdown:/bin/umount -a -r >/dev/null 2>&1 
+---------------------------------------------------------------------

> _______________________________________________
> BasLinux mailing list
> BasLinux AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/baslinux