From owner-freebsd-questions Wed Dec 9 09:34:08 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id JAA05407 for freebsd-questions-outgoing; Wed, 9 Dec 1998 09:34:08 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from Kitten.mcs.com (Kitten.mcs.com [192.160.127.90]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA05402 for ; Wed, 9 Dec 1998 09:34:06 -0800 (PST) (envelope-from mikebo@Mars.mcs.net) Received: from Mars.mcs.net (mikebo@Mars.mcs.net [192.160.127.85]) by Kitten.mcs.com (8.8.7/8.8.2) with ESMTP id LAA16075; Wed, 9 Dec 1998 11:34:00 -0600 (CST) Received: (from mikebo@localhost) by Mars.mcs.net (8.8.7/8.8.2) id LAA05725; Wed, 9 Dec 1998 11:34:00 -0600 (CST) From: Michael Borowiec Message-Id: <199812091734.LAA05725@Mars.mcs.net> Subject: Re: Securing the FreeBSD console To: SteveFriedrich@Hot-Shot.com Date: Wed, 9 Dec 1998 11:34:00 -0600 (CST) Cc: questions@FreeBSD.ORG In-Reply-To: <199812091715.MAA32666@laker.net> from "Steve Friedrich" at Dec 9, 98 12:12:51 pm X-Mailer: ELM [version 2.4 PL24] Content-Type: text Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > Just my two cents... > I think it's funny your people are *horrified* by this situation, yet > they have implemented absolutely NO physical security at all. This is > really quite absurd, because NO PC is secure if I have physical access. > First of all, in larger companies, development engineers are rarely responsible for plant security - and the plant security people are not responsible for computer security. So it falls to the UNIX admin... It's still a problem, even though you think it's absurd. Of course, physical access is everything. That's fundamental... However, xlock is SUPPOSED to provide a modicum of security. Otherwise it's just a screen saver, and then what's the point of it requiring a password?! My point is simply this: If xlock will not provide the security that reasonable people have come to expect, due to keyboard escapes in underlying systems, those HOLES should be documented. Not a lot to ask... Later, - Mike To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message