[ShadowAce]

Yeah, pretty much. However, GRUB comes before the kernel startup, so what's going on here is that GRUB can impose a password before it even chooses which kernel to boot (and which mode to boot into).

Having to input a GRUB password was considered a way around the "physical access means single user mode" exploit. This vulnerability puts the lie to that concept.

However, there is already a fix for this. We don't have to wait forever, or the next service pack, for a fix to be available.

[so_real]

However, there is already a fix for this. We don't have to wait forever, or the next service pack, for a fix to be available.

I do like that, very much :-) Thanks for the info.