this post was submitted on 01 Nov 2023
3 points (100.0% liked)
Linux 101 stuff. Questions are encouraged, noobs are welcome!
1060 readers
2 users here now
Linux introductions, tips and tutorials. Questions are encouraged. Any distro, any platform! Explicitly noob-friendly.
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Yes. The root user has access to all personal data, including your home folder.
If someone gets physical access to the PC, he can log in as root easily and mess with your data. If he just plugs in your hard drive, he can't see anything relevant.
I wonder if the question is in reference to unlocking the root account and setting a password for it. I don't know of any distros that actually have an unlocked root account and leave its password as empty, but I suppose its not completely impossible.
That being said, if an attacker gets physical access to your PC, its game over anyways. If your drive isn't encrypted with something like LUKS, then they can just boot up a live USB of whatever distro they want, mount the drive, and have easy access to its contents.
Ideally if you want to protect your PC against physical attacks, you'll at the minimum want some sort of drive encryption enabled, and preferably with Secure Boot enabled with your own keys enrolled if your machine supports it.