From owner-freebsd-questions Tue Oct 31 16:50:57 2000 Delivered-To: freebsd-questions@freebsd.org Received: from hotmail.com (f218.law7.hotmail.com [216.33.237.218]) by hub.freebsd.org (Postfix) with ESMTP id C895537B4D7 for ; Tue, 31 Oct 2000 16:50:55 -0800 (PST) Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 31 Oct 2000 16:50:55 -0800 Received: from 209.53.54.44 by lw7fd.law7.hotmail.msn.com with HTTP; Wed, 01 Nov 2000 00:50:55 GMT X-Originating-IP: [209.53.54.44] From: "Some Person" To: freebsd-questions@freebsd.org Subject: Securing boot -s and disabling CNTRL-ALT-DEL... Date: Wed, 01 Nov 2000 00:50:55 GMT Mime-Version: 1.0 Content-Type: text/plain; format=flowed Message-ID: X-OriginalArrivalTime: 01 Nov 2000 00:50:55.0721 (UTC) FILETIME=[CAC50590:01C0439D] Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Hi there, Is there a way to secure the console of a FreeBSD box from someone rebooting, weather they pull the plug or CNTRL-ALT-DEL (if not disabled) and issuing a boot -s without having complete root access in single user mode with not password prompt? In other words, what I mean is that anyone at the console can reboot the system, issue a boot -s, and have local root access! even `passwd root'. Not something I want of course, and I haven't used Linux in a long long time (sigh of relief) but I recall they had a way of password protecting that somehow as well. There must be a way, because that's not very secure otherwise and would really suck if some discruntled employee gained access to the console and did boot -s ; rm -rf /. You know? Also, i forgot, but some how on my BSD boxes, I disabled the CNTRL-ALT-DEL function, could anyone please remind me how I did it? :) Thanks so much! _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. Share information about yourself, create your own public profile at http://profiles.msn.com. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message