From owner-freebsd-questions@FreeBSD.ORG  Thu Nov 23 09:45:20 2006
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id B05CB16A47E
	for <freebsd-questions@freebsd.org>;
	Thu, 23 Nov 2006 09:45:20 +0000 (UTC)
	(envelope-from maanjee@gmail.com)
Received: from py-out-1112.google.com (py-out-1112.google.com [64.233.166.182])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0D5B343D6D
	for <freebsd-questions@freebsd.org>;
	Thu, 23 Nov 2006 09:44:45 +0000 (GMT)
	(envelope-from maanjee@gmail.com)
Received: by py-out-1112.google.com with SMTP id f31so269056pyh
	for <freebsd-questions@freebsd.org>;
	Thu, 23 Nov 2006 01:45:19 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com;
	h=received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:references;
	b=ZTIXQyPu9A0xq3m6s0laH5qyP+rhXb4Bxcw4oarkvXl6yZl9ztQwaiYStiewh48hG3V0EhqiF6GJgxrDn9j8J0hkCVs2yyNmiZNUrm9kHMS0bVonxKj86YgJLsSj/ccuPLgqLw/MIIuA6Q1UmDPe3nuYHA9x6uDDgbHbFEULcOc=
Received: by 10.35.43.10 with SMTP id v10mr3008644pyj.1164275119262;
	Thu, 23 Nov 2006 01:45:19 -0800 (PST)
Received: by 10.35.32.4 with HTTP; Thu, 23 Nov 2006 01:45:19 -0800 (PST)
Message-ID: <2cd0a0da0611230145j3b5f42cfg7b9025236a91e7a3@mail.gmail.com>
Date: Thu, 23 Nov 2006 10:45:19 +0100
From: VeeJay <maanjee@gmail.com>
To: "Olivier Nicole" <on@cs.ait.ac.th>
In-Reply-To: <200611230914.kAN9E2GW065034@banyan.cs.ait.ac.th>
MIME-Version: 1.0
References: <2cd0a0da0611211941iae07787q3f433fb2c8ab1f22@mail.gmail.com>
	<20061122163317.GC50939@gizmo.acns.msu.edu>
	<2cd0a0da0611230056l15bfccaamb3ed3d439e2786b8@mail.gmail.com>
	<200611230914.kAN9E2GW065034@banyan.cs.ait.ac.th>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Content-Filtered-By: Mailman/MimeDel 2.1.5
Cc: jerrymc@msu.edu, freebsd-questions@freebsd.org
Subject: Re: Password Security
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 23 Nov 2006 09:45:20 -0000

On 11/23/06, Olivier Nicole <on@cs.ait.ac.th> wrote:
>
> > And how can one into the System by booting from a CD if it still
> > requires the Password even in Single User mode?
>
> Booting from CD, floppy or hard disk is slected at BIOS level.
>
> Booting in single or multi user mode is at Operating system level.
>
> Booting is in the following order:
>
> 1) BIOS select what medium to boot from
>
> 2) the operating system boot from the selected medium
>
> So when it comes to the Single user password, itis already at stage 2)
> it has passed the stage 1 (booting from hard disk ofr CD) without
> password.
>
> Olivier
>

So, it means, that I should take the following steps

1. Password on BIOS
2. Change the order of booting i.e. When system is installed and working
once, then I just the change the Booting FIRST from HardDisk.
3. Put the password on Single User mode.

So, what more? Do you people think that I have got somehow security barrier
for unauthorized access?



-- 
Thanks!

BR / vj