Subject: Secure boot patch for 0.99pl5
From: [email-masked] (Ian Jackson)
Date: 15 Feb 93 19:31:54 GMT
Newsgroups: comp.os.linux.announce

I have updated my secure boot patch for Linux 0.99 pl5, and uploaded
it to sunsite.unc.edu (as secureboot99.5, currently in
/pub/Linux/Incoming). It incorporates my earlier "default floppy type"
patch as an option for those who need it.

Here is an extract from the description:
--8<--
This is the Secure Boot patch, for Linux 0.99pl5.

This patch will allow you to prevent anyone from booting your machine
from a floppy and gaining access to all your files.

** You need the following to be true:

  - You have a password-protected BIOS. You must be able to protect
    the information in the CMOS from change without preventing normal
    booting.

  - You don't run DOS. That is, you don't have a DOS image in your
    LILO boot prompt, and if you ever do want to run DOS you'll be
    happy to type in the CMOS password.

  - You don't run any other single-user operating systems, or any
    insecure multi-user ones. If, for example, you also have a 386BSD
    option at boot-time, anybody who can become root on 386BSD will be
    able to crack into your Linux setup as well.
...
--8<--

All comments gratefully received.

--
Ian Jackson  [email-masked] ..!uknet!cam-orl!iwj  These opinions are my own.
Olivetti Research Ltd, Old Addenbrookes Site, Trumpington St, Cambridge, UK;
Home: 35 Molewood Close, Cambridge, CB4 3SR; +44 223 327029.     +44 223 343398
Email also via: [email-masked]   PGP2 public key available on request

-- 
Send submissions for comp.os.linux.announce to: [email-masked]