From owner-freebsd-questions Wed Dec 9 09:16:00 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA03814 for freebsd-questions-outgoing; Wed, 9 Dec 1998 09:16:00 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from laker.net (jet.laker.net [205.245.74.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA03803 for ; Wed, 9 Dec 1998 09:15:53 -0800 (PST) (envelope-from sfriedri@laker.net) Received: from nt (digital-pbi-134.laker.net [208.0.233.34]) by laker.net (8.9.0/8.9.LAKERNET.NO-SPAM.SPAMMERS.AND.RELAYS.WILL.BE.TRACKED.AND.PROSECUTED.) with SMTP id MAA32666; Wed, 9 Dec 1998 12:15:33 -0500 Message-Id: <199812091715.MAA32666@laker.net> From: "Steve Friedrich" To: "Gregory Sutter" , "Michael Borowiec" Cc: "questions@FreeBSD.ORG" Date: Wed, 09 Dec 1998 12:12:51 -0500 Reply-To: "Steve Friedrich" X-Mailer: PMMail 98 Professional (2.01.1600) For Windows NT (4.0.1381;3) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Re: Securing the FreeBSD console Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 9 Dec 1998 10:50:07 -0600 (CST), Michael Borowiec wrote: >Just FYI... I'm introducing FreeBSD at work, a 1000-seat engineering >environment, where people share offices and labs that don't lock. >Most of the UNIX folk in my environment were horrified by these defaults - >but moreso by the lack of documentation pointing them out. It was even >suggested the OS not be used at all, for fear that (1) the FreeBSD team >either doesn't understand, or doesn't take commercial security concerns >seriously, and (2) that there are probably many more undocumented actions >in a "hobbyist (read TOY) OS" that could be exploited to gain fast access. Just my two cents... I think it's funny your people are *horrified* by this situation, yet they have implemented absolutely NO physical security at all. This is really quite absurd, because NO PC is secure if I have physical access. Unix systems measure "uptime" in years, Winblows measures it in minutes. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message