Pick a Free OS

GNU Linux Security

a crash. By default it does not ask for user password. so edit the

/etc/inittab file and the following

contentsa

id:3:initdefault:
~~:S:wait:/sbin/sulogin

Be sure to backup the inittab file in case you make mistake. after

adding the contents execute

#/sbin/init q

which rereads the inittab contents and loads the new configuration.

Editing the /etc/lilo.conf file

timeout=00

This gives lilo wait for 0 seconds and interval for user to put in parameters on lilo boot

prompt. You should do this unless your are dual booting some other

Operating system like windows. You should also provide a password

for lilo. Basically this option specifies that for any parameters

passed to boot prompt of lilo will be asking you to supply a password

enabled by password parameter option.

password=

This option basically protect the Linux image from booting without

specifying a password. But this can be problem if you reboot the

systems remotely,it will always wait for the user to type in the

required password.

So after adding these changes

/etc/lilo.conf file should look like

this.

timeout=50 Change this line to 00

Remove the line if your are not passing any command line parameters.

Add this line to enable linux image protection

restricted

Add this line to enable password and put your password.

password=

boot=/dev/hda
map=/boot/map
install=/boot/boot.b
message=/boot/message

Remove the above line line if you do not want to get welcome message

lba32

image=/boot/vmlinuz-2.4.18-3bigmem
label=linux
initrd=/boot/initrd-2.4.18-3bigmem.img
read-only
root=/dev/hda7

image=/boot/vmlinuz-2.4.18-3smp
label=linux-smp
initrd=/boot/initrd-2.4.18-3smp.img
read-only
root=/dev/hda7

image=/boot/vmlinuz-2.4.18-3
label=linux-up
initrd=/boot/initrd-2.4.18-3.img
read-only
root=/dev/hda7

The configuration is readable by everyone, so change the permissions to disable that.

chmod 600 /etc/lilo.conf

Now we update our configuration for changes to take affect after rebooting.

/sbin/lilo -v

This will rewrite the new configuration for the Linux loader after we made changes to it. We