Re: Magic SysRq [was Re: X ignores keyboard and mouse input, but shows cursor movement (etch)]


On Sep 18, 2007, at 11:19 AM, Ralph Katz wrote:
This is a local vulnerability, yes. No worse than pulling the plug. Of
course that IS the problem. Only keyboard access is needed for this.

To test, I booted a second etch computer which comes up to a gnome
desktop, and hit alt-sysrq-i. The display shows a nasty pink colored
image... Next was to hit alt-sysrq-b which must be the linux 3-finger
salute known to windows people.

Hmm. I see what you're getting at, but is this really any worse than the default ctrl-alt-del behavior? (Or is there a security warning about that, too?)

Frankly, if someone has physical access, a reboot is just about the least of your worries. It's pretty trivial for them to gain root access if they have physical access to the hardware.




--
To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx with a subject of "unsubscribe". Trouble? Contact listmaster@xxxxxxxxxxxxxxxx

Relevant Pages