Gentoo Archives: gentoo-releng

From: Martin Schlemmer <azarah@g.o>
To: gentoo-releng@l.g.o
Subject: Re: [gentoo-releng] Re: baselayout changes for livecds
Date: Sun, 18 Jan 2004 08:03:40
Message-Id: 1074413215.8472.16.camel@nosferatu.lan
In Reply to: Re: [gentoo-releng] Re: baselayout changes for livecds by Paul de Vrieze
On Sat, 2004-01-17 at 20:29, Paul de Vrieze wrote:
> On Saturday 17 January 2004 18:06, Brad House wrote: > > no, the rcscripts must now parse the kernel commandline opts > > to get a few options. There's really not many other ways to > > do it. Besides you just proved by your statement that someone > > could instead pass init=/bin/sh and override any sort of > > init process, so trying to make the 'cdroot' option secure > > is obsurd, as there's 10 million other ways to get in if you > > have direct access to the computer. > > The big difference is that init=/bin/sh does not give you a normal working > system, cdboot however could be abused to get a normal functioning > passwordless console. That would allow incapable systemadmins to decide to do > this, or even tell others to do it (the latter I want to prevent). >
Ill post some changes later that may be acceptable in this case. -- Martin Schlemmer -- Martin Schlemmer Gentoo Linux Developer, Desktop/System Team Developer Cape Town, South Africa

Attachments

File name MIME type
signature.asc application/pgp-signature