No Password for local console root access? O_O

[mattlach]

Hey all,

I must be missing something, but whatever I do, at the local console, you can just type 9, and viola, you have instant root access to the box.

This can't be right. (right?)

How do I fix it and make sure that you can't access the local console without a password?

I tried assigning a new password using the passwd command, but it appears to not have been effective...

Much appreciated,
Matt

 

[ben]

This is correct. Login from a physical console does not require a password. As far as I know there is no way to make it require one. Even without typing 9, the console menu gives several options that are equivalent to root access, including the reset admin password button and factory defaults reset. Beyond that, physical access would be equivalent to root access because someone can just plug in their own boot device and reboot the box.

tl;dr: It's true.