Red Hat Bugzilla – Bug 1205
root level access from lilo w/o root p/wd
Last modified: 2008-05-01 11:37:49 EDT
If you enter
at lilo's boot: prompt you gain single-user root access
without needing root's (or anyone's) password.
From here you can do almost anything you want.
This prob. has already been reported, but I couldn't find
it in bugzilla.
Colin S. Miller
that's a usefull thing to use if you forget your password, if you want
to disable it all you have to do is read the man-pages on lilo.conf
there is an option called 'restricted' which forces lilo to verify the
specified password if there is ANY commandline used at the LILO
that's a feature of lilo. If you have physical access
to the machine, you can do other things anyways...
(linux init=/bin/bash, and the like). You can
put a password on lilo if you need to.