[security] lost root password.

rosskevin · Posted: Thu Apr 17, 2003 7:15 pm Post subject: [security] lost root password.

So I've done the unthinkable

. Actually, my (production) gentoo box has been up so long and setup properly so I log in with my username, that I've just plain forgotten the root password.

Is it true that if I have physical access, that I can reset the password? Could someone point me to a doc or outline the procedure?

Thanks
_________________
I'm just a java guy...

compu-tom · Posted: Thu Apr 17, 2003 7:20 pm Post subject:

boot from a rescue system, mount the hd, then edit /mnt/gentoo/etc/shadow and delete the password hash between the colons.

Then, reboot and login with the empty password. Assign a new password.

That's it

darktux · Posted: Thu Apr 17, 2003 7:20 pm Post subject:

If you get physical access to the box, then boot with Gentoo's LiveCD, mount the partitions, do the chroot thing, and then do passwd and set a new password.

There ya go :wink:

_________________
Lego my ego, and I'll lego your knowledge

www.tuxslare.org - My reborn website

neilhwatson · l33t Joined: 06 Feb 2003 Posts: 719 Location: Canada

If you boot to single user mode you become root without needing the password. Then use passwd to reset.
_________________
The true guru is a teacher.
Neil Watson

dermot · Posted: Thu Apr 17, 2003 8:29 pm Post subject:

And remember: sudo is your friend.
_________________
Dermot

I bought some rock star ashes from the back of Rolling Stone
I don't think he would've minded - he couldn't sell his soul

Vancouverite · Posted: Fri Apr 18, 2003 8:10 am Post subject:

Here is the procedure to reset roots password.

1) Append: init=/bin/bash to your kernel options by editing your bootloader entry and boot it. This will give you a root shell.
2) Remount / read/write with: mount -o remount,rw /
3) Set roots password with: passwd
_________________
Screenshot

puggy · Posted: Fri Apr 18, 2003 12:43 pm Post subject:

Fuck me. I think i'll be installing a grub password to stop that being able to happen.

Puggy
_________________
Where there's open source , there's a way.

bsolar · Bodhisattva Joined: 12 Jan 2003 Posts: 2764

compu-tom · Posted: Fri Apr 18, 2003 12:51 pm Post subject:

Don't forget to assign a BIOS password and to disable CD or Floppy booting (remove them entirely). BTW: The safest way is put the computer away, out of reach for anybody

bsolar · Bodhisattva Joined: 12 Jan 2003 Posts: 2764

metacove · Tux's lil' helper Joined: 09 Apr 2003 Posts: 148

If it's 2.4.19 and below and you have a shell account you can use a ptrace exploit

puggy · Posted: Fri Apr 18, 2003 2:05 pm Post subject:

Would encrypting the file system slow things down a lot due to encryption/de-cryption having to occur all the time?

Puggy
_________________
Where there's open source , there's a way.

Vancouverite · Posted: Fri Apr 18, 2003 9:21 pm Post subject:

puggy · Posted: Fri Apr 18, 2003 9:26 pm Post subject:

hmm. I seems the only way to be secure is put you computer in a big steel box to which only you have the key. :-D

Cheers on the crypto thing. Ever since reading the cryptonomicon I've wanted to encrypt something for a reason. :-)

Puggy
_________________
Where there's open source , there's a way.

easykill · Apprentice Joined: 07 Dec 2002 Posts: 230

Orange · n00b Joined: 11 Apr 2003 Posts: 47

Jeld · Posted: Sat Apr 19, 2003 11:51 am Post subject:

Being in the computer security business for a while, I can only say this. Rule #1 Client-side security doesn't work.

In this case, it means that if a person with malicious intent gets phisical access to the computer there is nothing you can do to stop him/her from accessing your data. The only thing you can do is make them sweat a lot while doing it.

To this there is a side note. You can make system secure emnough to be not worth breaking. For example, if you encrypt your file system using strong crypto, make a 4096 bit key to unlock it, store it on a keychain USB device and carry it with you at all times, a person who got access to your system will still be able to get to your data, but if the data consists of your collection of mp3s then the effort required to get to it will be much more then the data is worth, since it will involve either using supercomputers and teams of cryptographers or taking the USB device from your dead body :twisted:

On the other side ( of the side note

) the more security measures you take to protect a system the more difficult your system becomes for regular use. One of the effects of tightening the computer security is that at some point of tightening it the security starts to actually weaken because of the human factor. For example, for security purposes, one can install kerberos, disable permanent passwords and issue a one-time password every time one logs in to the system, since password changes every login, the password security becomes very high until somebody starts writing his one time passwords on sticky notes since he/she cannot memorize a new password every day.

So, the moral of this narrative is, whatever you do you lose :lol:

_________________
package JAPH;sub x{$/='$';@1=map{$_=ord;$_--;chr}
split//,<DATA>;@2=map{$_=ord;$_++;chr}split//
,<DATA>;$_=sub{$.++%2?shift@2:shift@1};bless$_;}
1;$x=JAPH->x;for(1..25){print&$x,;}__DATA__
Kt!ouf!fmIdf"$ts@ngqOq`jq

rosskevin · Posted: Tue Jul 08, 2003 9:14 pm Post subject: Results: no su from ssh

karl420 · Posted: Tue Jul 08, 2003 10:55 pm Post subject:

You could su in ssh before?

Deathwing00 · Posted: Wed Jul 09, 2003 12:29 am Post subject:

I have a more hacker idea (also totally inefficient!!!). Use john (johntheripper)... nice to go back to those nice times. :cry:

rosskevin · Posted: Wed Jul 09, 2003 1:55 am Post subject:

yes, I could su from ssh before.
_________________
I'm just a java guy...

karl420 · Posted: Wed Jul 09, 2003 2:08 am Post subject:

LOL, yeah jacktheripper and a big-a*s wordfile that took you 48 hours over a 14.4 modem to download!

Ah, the good old days.
Karl

karl420 · Posted: Wed Jul 09, 2003 2:10 am Post subject:

Whoa, no kidding, you are from Franklin! WOW!

I live in Nashville, but I work in Franklin at Franklin Dishworks and Computer, as a computer technician, and sysadmin of a few unix boxen. If you ever want to come down and check the place out, give me an email! karl@stonedpenguin.com

Karl