Prompt for login at the end of the recovery startup instead of login as root

Registered by wam on 2006-09-21

The recovery startup in grub can be used on shared/public computers to take control over the computer and access to files that shouldn’t be accessed (system files or personal files)

Today, there are different ways to avoid people to access this recovery mode but none of them is acceptable yet:
*That recovery line can be removed from the menu.lst or set as locked, but will be restored next time grub will be updated (new kernel installation)
*A global lock can be set, which should be kept after an update, but then, each line will be locked, not only recovery one. Then, the lock password should be given to every user, which makes it useless.

The best solution would then be to simply prompt for a login and a password instead of login in the user as root automatically

Blueprint information

Status:
Not started
Approver:
None
Priority:
Undefined
Drafter:
None
Direction:
Needs approval
Assignee:
None
Definition:
New
Series goal:
None
Implementation:
Unknown
Milestone target:
None

Related branches

Sprints

Whiteboard

An idea... if the user forgets his/her password and needs to use 'Recovery Mode', they should answer some security questions before being granted 'root' access.... the first user (the person who installed the operating system) could fill in the details upon installation. e.g, Mothers Maiden Name? Last School Attended

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.