From: ijackson@nyx.cs.du.edu (Ian Jackson)
Newsgroups: comp.os.linux.announce
Subject: Secure boot patch for 0.99pl5
Message-ID: <1993Feb15.193154.15289@tc.cornell.edu>
Date: 15 Feb 93 19:31:54 GMT
Approved: linux-announce@tc.cornell.edu (Matt Welsh)

I have updated my secure boot patch for Linux 0.99 pl5, and uploaded
it to sunsite.unc.edu (as secureboot99.5, currently in
/pub/Linux/Incoming). It incorporates my earlier "default floppy type"
patch as an option for those who need it.

Here is an extract from the description:
--8<--
This is the Secure Boot patch, for Linux 0.99pl5.

This patch will allow you to prevent anyone from booting your machine
from a floppy and gaining access to all your files.

** You need the following to be true:

  - You have a password-protected BIOS. You must be able to protect
    the information in the CMOS from change without preventing normal
    booting.

  - You don't run DOS. That is, you don't have a DOS image in your
    LILO boot prompt, and if you ever do want to run DOS you'll be
    happy to type in the CMOS password.

  - You don't run any other single-user operating systems, or any
    insecure multi-user ones. If, for example, you also have a 386BSD
    option at boot-time, anybody who can become root on 386BSD will be
    able to crack into your Linux setup as well.
...
--8<--

All comments gratefully received.

--
Ian Jackson  iwj@cam-orl.co.uk ..!uknet!cam-orl!iwj  These opinions are my own.
Olivetti Research Ltd, Old Addenbrookes Site, Trumpington St, Cambridge, UK;
Home: 35 Molewood Close, Cambridge, CB4 3SR; +44 223 327029.     +44 223 343398
Email also via: ijackson@nyx.cs.du.edu   PGP2 public key available on request

-- 
Send submissions for comp.os.linux.announce to: linux-announce@tc.cornell.edu
