Single user mode security issue

[The Guy]

I was using single user mode the other day, when I realized that anyone could get root access on my mac without any effort, and could do anything as long as they know how to use the terminal. So how do I make it so someone has to put a password in before using single user mode, like the console mode in linux does.

 

[GGJstudios]

I was using single user mode the other day, when I realized that anyone could get root access on my mac without any effort, and could do anything as long as they know how to use the terminal. So how do I make it so someone has to put a password in before using single user mode, like the console mode in linux does.

You can set a firmware password, but that can be circumvented, as well. There's no substitute for controlling who has physical access to your Mac.

 

[kresh]

I downgraded to Leopard because of this. There is a fix for 10.5 and earlier.

 

[munkery]

Passwords can be reset in Linux if the attacker has physical access. http://m.makeuseof.com/tag/how-to-reset-any-linux-password/

Protecting single user mode does not eliminate all avenues to reset passwords if have physical access to machine.