>  The thing is, no matter what you try to do, if the malicious person has
> direct access to the computer, it will be insecure. The only thing you can
> do is to encrypt your data, in which case it doesn't matter if the root
> password can be reset (because the root password doesn't help you 
> decrypting
> the files).

Unless your particular encryption system works transparently to the user for 
each account automatically (like it does in Win XP).  If that was the case, 
being able to gain access as root would allow you to access all the files 
encrypted by root.  Is it impossible that there is some software for Linux 
that works in a similar manner?  (ie you can only "decrypt" by logging in 
with a particular account, not from examining HD contents).

Post a reply to this message