Messages in this thread | | | Date | Thu, 26 Nov 1998 08:00:03 -0600 (CST) | From | Adam Heath <> | Subject | Re: /dev/nvram on my Celebris |
| |
On Thu, 26 Nov 1998, Johnny Tevessen wrote:
> Quoting David Luyer (luyer@ucs.uwa.edu.au): > > > However there's nothing > > to stop the attacker compiling a new kernel and rebooting into it unless you > > go to significant effort there too, > > There is. Don't use lilo. Have a little DOS partition. Don't include > DOS support in the kernel. Use a little DOS bootmenu to start Linux. > But default to start DOS there. This prevents from having someone > run lilo on a new kernel and do a shutdown -r. > > > and then it becomes a pain to quickly fix > > a kernel problem which suddenly comes up. > > If you are on the console, you can still reboot and choose "Linux" from > the boot menu. > > Did I miss sth?
Yes.
Remote administration. The way you described, you can't update from remote.
Adam
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |