James Jackson wrote:
>
> Sun Sparc Stations (at least the II's) had the ability to allow the
> user to boot to single-user mode. (Don't remember the OS.)
The was specific to SunOS; Solaris demands that the root
password be supplied when booted in single user mode (or when
forced into single user mode, such as with fsck pukes).
The easiest way to compromise this is to boot the machine off
of another device (CD works dandy); then mount the root partition
of the boot drive and whack the /etc/shadow entry.
Just further proof that security measures are meaningless in the
absence of good physical security...
--
Chris Kennedy
chris_at_mainecoon.com
http://www.mainecoon.com
PGP fingerprint: 4E99 10B6 7253 B048 6685 6CBC 55E1 20A3 108D AB97
Received on Mon Nov 20 2000 - 15:02:50 GMT