I want to completely disable resetting root password! Is it possible? If yes, then how?
Asked
Active
Viewed 2,672 times
1
-
See fossfreedom's answer to How can I prevent someone from resetting my password with a Live CD? That answer addresses your specific question--how to prevent people from editing boot options with GRUB to produce a root shell on boot--and some of the other answers address the other aspects of protecting a machine's password from users with (a constrained but significant degree of) physical access, including the limitations inherent in doing so. – Eliah Kagan Apr 11 '15 at 16:49
1 Answers
2
If you wish to prevent people with access to your computer from changing your root password, you can encrypt your entire Ubuntu partition so that other people cannot boot your installation of Ubuntu at all without knowing the password to the partition.
This is because once somebody has physical access to your computer, there is no way (at least of that I can think of) to prevent that other than to have your root partition encrypted.
zhongfu
- 1,449
-
2IMO encryption is the best method, but, be warned, even with an encrypted install / boot is NOT ENCRYPTED. The encryption can be cracked if one has physical access either with a key logger (no all ke loggers are external) or by installing a custom kernel or custom initrd. IMO one MUST LIMIT PHYSICAL ACCESS. – Panther Apr 11 '15 at 17:05
-
You can partially work around that by using hardware-based full disk encryption solutions, but the point about keyloggers still stand. – zhongfu Apr 11 '15 at 17:18