[lkml]   [1998]   [Nov]   [26]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: /dev/nvram on my Celebris
Quoting David Luyer (

> However there's nothing
> to stop the attacker compiling a new kernel and rebooting into it unless you
> go to significant effort there too,

There is. Don't use lilo. Have a little DOS partition. Don't include
DOS support in the kernel. Use a little DOS bootmenu to start Linux.
But default to start DOS there. This prevents from having someone
run lilo on a new kernel and do a shutdown -r.

> and then it becomes a pain to quickly fix
> a kernel problem which suddenly comes up.

If you are on the console, you can still reboot and choose "Linux" from
the boot menu.

Did I miss sth?

Trust no-one.

To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:45    [from the cache]
©2003-2014 Jasper Spaans. hosted at Digital Ocean