Re: Adding Password Protection to Single User Mode

On 7/6/21 12:27 PM, Valdrin MUJA wrote:
> Hi Folks,
>
> I want to add a small password protection mechanism to
> "boot -s" (single-user mode).
>
> Therefore, I'm working on /sys/stand/boot/boot.c, I've written
> some code in boot.c, and run "make", "make obj", "make install"
> in /sys/. However, I couldn't enable my update "boot" binary on startup.
> On startup, the default boot program is working.
>
> How can I replace my updated boot program with the default one?
>
> P.S.: I've tried compile and install kernel and the result didn't change.

If you remove secure from console in /etc/ttys then a standard install will
require a password. Of course if they can boot a custom kernel or bsd.rd then
any password can always be bypassed.