The following reply was made to PR port-i386/24897; it has been noted by GNATS.

From: David Laight <david@l8s.co.uk>
To: gnats-bugs@netbsd.org
Cc: 
Subject: Re: port-i386/24897: installboot requires passing boot password on the command-line
Date: Sat, 10 Sep 2005 20:51:14 +0100

 On Sat, Sep 10, 2005 at 07:15:05PM +0000, Christian Biere wrote:
 >  
 >  The problem with my patch is what?
 
 It is so unlilkely that anyone will be looking for the installboot
 password, (and be in a position to make use of it,) without having
 alternate methods to access the system that the threat quoted is
 extremely unlikely to be relevant.
 
 If you are that worried about, then run in installboot in single user.
 
 	David
 
 -- 
 David Laight: david@l8s.co.uk