[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [POSSIBLE GRAVE SECURITY HOLD]



On Wed, Feb 02, 2000 at 12:12:24PM -0800, Joey Hess wrote:
> Thomas Quinot wrote:
> > And here is the problem:
> >   The MBR used by Debian by default allows any user to boot from
> >   floppy. No other PC MBR does that.
> 
> Again, why should mbr be held to a different standard than lilo? You say
> it's undocumented, but see /usr/doc/mbr/README:
> 
>    The boot prompt looks something like this:
> 
>    14FA:
> 
>    This is the list of valid keys which may be pressed.  This means that
>    partitions 1, and 4 can be booted, also the first floppy drive (F).  The
>    A means that 'advanced' mode may be entered, in which any partition may
>    be booted.

It's not written in French, perhaps that is why he ignored it.

/me gleefully heaps more fuel on the fire

-- 
G. Branden Robinson            |    I just wanted to see what it looked like
Debian GNU/Linux               |    in a spotlight.
branden@ecn.purdue.edu         |    -- Jim Morrison
roger.ecn.purdue.edu/~branden/ |

Attachment: pgpaAqlEsU53C.pgp
Description: PGP signature


Reply to: