GNU Linux Security
a crash. By default it does not ask for user password. so edit the
/etc/inittab file and the following
contentsa
id:3:initdefault:
~~:S:wait:/sbin/sulogin
Be sure to backup the inittab file in case you make mistake. after
adding the contents execute
#/sbin/init q
which rereads the inittab contents and loads the new configuration.
Editing the /etc/lilo.conf file
timeout=00
This gives lilo wait for 0 seconds and interval for user to put in parameters on lilo boot
prompt. You should do this unless your are dual booting some other
Operating system like windows. You should also provide a password
for lilo. Basically this option specifies that for any parameters
passed to boot prompt of lilo will be asking you to supply a password
enabled by password parameter option.
password= This option basically protect the Linux image from booting without specifying a password. But this can be problem if you reboot the systems remotely,it will always wait for the user to type in the required password. So after adding these changes /etc/lilo.conf file should look like this. timeout=50 Change this line to 00 Remove the line if your are not passing any command line parameters. Add this line to enable linux image protection restricted Add this line to enable password and put your password. password= boot=/dev/hda Remove the above line line if you do not want to get welcome message lba32 image=/boot/vmlinuz-2.4.18-3bigmem image=/boot/vmlinuz-2.4.18-3smp image=/boot/vmlinuz-2.4.18-3 The configuration is readable by everyone, so change the permissions to disable that. chmod 600 /etc/lilo.conf Now we update our configuration for changes to take affect after rebooting. /sbin/lilo -v This will rewrite the new configuration for the Linux loader after we made changes to it. We
map=/boot/map
install=/boot/boot.b
message=/boot/message
label=linux
initrd=/boot/initrd-2.4.18-3bigmem.img
read-only
root=/dev/hda7
label=linux-smp
initrd=/boot/initrd-2.4.18-3smp.img
read-only
root=/dev/hda7
label=linux-up
initrd=/boot/initrd-2.4.18-3.img
read-only
root=/dev/hda7