Posts

Showing posts from July, 2008

Reminder: Physical access = Root access

Today I needed to reset a password on an Ubuntu system. While doing this, I was reminded of just how simple it is to get root access on a default install of Ubuntu. I wanted to share these steps on this blog to remind people that if someone has physical access to your Ubuntu system, they can get root access in just a few seconds. Boot up your computer When asked, hit "Escape" to enter the GRUB menu Select the option that displays "recovery mode" Select the option labeled "root prompt" You are now logged in as root with the ability to change anything It is really just that simple. This root console is great for advanced users who need to reset a password, but the average user will have no idea what to do. For instance, here is how I found the main user of this system: root@laptop:~# cat /etc/passwd | grep 1000:1000 tristan:x:1000:1000:Tristan Rhodes,,,:/home/tristan:/bin/bash This output shows that there is a user named "tristan" who is the ma