[lkml]   [1996]   [Jun]   [4]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: boot parameters, init= and security issues
Date (Miquel van Smoorenburg) writes:
> Alas, Linus rejected it. This normally means he thinks it
> was not a good idea. Hence the request for comment here.
> Would something like this be useful? Or isn't it because there
> are other boot options that can be abused to achieve the
> same effect (and turning them all off would be unacceptable) ?

Off-hand the possibility of using a different root filesystem on a
removeable medium (floppy disk) springs to mind as yet another obvious
security threat, but this can probably be avoided, by compiling the
floppy driver as a module and not allowing for NFS mounted root
filesystems. Most of the other boot time options probably result in
making the system rather unreliable and prone to crashes but I am not
aware of obvious exploits.

Generally, though I am in favor of your proposal. Providing as many
boot-time security measures as possible sounds like a *very* good idea
--- but maybe I am just a little bit paranoid :-)

Markus Gutschke Internet:
Schlage 5a
D-48268 Greven-Gimbte

 \ /
  Last update: 2005-03-22 13:37    [W:0.053 / U:0.112 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site