Linux Security Hole

Hi,

My friend shows this to me:

After bootup, at the lilo prompt, he just key in “linux single”, then he can login and run “passwd root” to change the root password!

How can this happen? Anyway to secure this?

Thx.