Re: [gentoo-user] Re: Block root user from login on xorg GUI

[Alan McKinnon <alan.mckinnon@gmail.com>]

On Saturday 14 November 2009 22:46:18 Dirk Heinrichs wrote:
> Am Samstag 14 November 2009 16:13:04 schrieb Nikos Chantziaras:
> > Ever heard about make menuconfig?
> 
> ???

The account foolishly being "prevented" from bypassing SELinux is root.

So, configure a new kernel, disable SELinux, build, install, reboot.

Voila! No SELinux.

Or,

Edit grub.conf, reboot.

Voila! No SELinux.

Or, (as SELinux can be used to prevent access to grub.conf)

Just hit the damn power button and edit the kernel options in the grub command 
line.

Voila! No SELinux.

Lessons learned:

Trying to prevent root from doing $STUFF on a pc is utterly and completely 
pointless and simply will not succeed, ever. There is hardware where this can 
be done, but it's not a PC, has no Intel designs in it and is often truly 
secured with armed guards.

trying to prevent root from doing $STUFF on Unix is utterly and completely 
pointless and simply will not succeed, ever. There are OSes where this can be 
done, but they are not Unix. By definition, on Unix root can do anything, 
including bypassing systems to prevent root from doing anything.

-- 
alan dot mckinnon at gmail dot com