boot security

Albert D. Cahalan (acahalan@cs.uml.edu)
Sat, 8 Nov 1997 16:30:46 -0500 (EST)


Many Linux machines are insecure because the owner does not
realize that there is a back door in the boot loader.
Something must print
"Warning: boot loader may be insecure. (old or missing password?)\n"
when that is the case. Most people don't realize the danger.

(assume somebody opening the case to reset the BIOS will get noticed)

Since the boot loader is seldom replaced, the kernel should
print the message when the boot loader does not indicate
that the boot is minimally secure. It would be best to print
the message last so that it does not scroll off the screen.