[Semibug] OpenBSD - Authenticate boot into single user mode
Jonathan Drews
jondrews at fastmail.com
Wed Jun 2 06:03:23 EDT 2021
Hi People:
I have an OpneBSD laptop. I was distrurbed to find this:
I Forgot My Root Password
https://www.openbsd.org/faq/faq8.html
You boot into single user mode;
boot> boot -s
and now have root privliges and can change the root password!
My question is how do I prevent this? I thought of using a BIOS
level password. That would suspend the boot process until you
entered a password. However the thief could remove the CMOS battery
and the BIOS would reset.
How can I require authentcation on single user mode boot in OpenBSD?
Kind regards,
Jonathan
More information about the Semibug
mailing list