[sllug-members]: Security Question: To password protect GRUB or not?

[Kurt Wall]

On Wed, Aug 02, 2006 at 11:02:51AM -0600, Evan Dillon wrote:
> I understand that physical security is compromised when bios and grub
> passwords are not used, but is remote security compromised in any way?

Sure, potentially so. We use remote consoles all the time to watch 
blades boot in the lab without having to get up from our desks. If
you don't have a console set up, this particular vulnerability isn't
present. The larger point is that there is no "silver bullet" for
security, just layers of security that have a deterrent effect.

Kurt