Prompt for login at the end of the recovery startup instead of login as root
The recovery startup in grub can be used on shared/public computers to take control over the computer and access to files that shouldn’t be accessed (system files or personal files)
Today, there are different ways to avoid people to access this recovery mode but none of them is acceptable yet:
*That recovery line can be removed from the menu.lst or set as locked, but will be restored next time grub will be updated (new kernel installation)
*A global lock can be set, which should be kept after an update, but then, each line will be locked, not only recovery one. Then, the lock password should be given to every user, which makes it useless.
The best solution would then be to simply prompt for a login and a password instead of login in the user as root automatically
Blueprint information
- Status:
- Not started
- Approver:
- None
- Priority:
- Undefined
- Drafter:
- None
- Direction:
- Needs approval
- Assignee:
- None
- Definition:
- New
- Series goal:
- None
- Implementation:
-
Unknown
- Milestone target:
- None
- Started by
- Completed by
Related branches
Related bugs
Sprints
Whiteboard
An idea... if the user forgets his/her password and needs to use 'Recovery Mode', they should answer some security questions before being granted 'root' access.... the first user (the person who installed the operating system) could fill in the details upon installation. e.g, Mothers Maiden Name? Last School Attended
