From owner-freebsd-stable  Sat Jul  8 16:25:24 2000
Delivered-To: freebsd-stable@freebsd.org
Received: from netmint.com (netmint.com [207.106.21.130])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3DF3937B721; Sat,  8 Jul 2000 16:25:20 -0700 (PDT)
	(envelope-from support@netmint.com)
Received: from localhost (support@localhost)
	by netmint.com (8.9.3/8.9.3) with ESMTP id TAA07445;
	Sat, 8 Jul 2000 19:22:23 -0400 (EDT)
Date: Sat, 8 Jul 2000 19:22:23 -0400 (EDT)
From: NetMint Support <support@netmint.com>
To: Dag-Erling Smorgrav <des@flood.ping.uio.no>
Cc: Troy Arie Cobb <tcobb@staff.circle.net>,
	"'Alex Popa'" <razor@ldc.ro>,
	"Dan O'Connor" <dan@mostgraveconcern.com>,
	freebsd-security@FreeBSD.ORG, freebsd-stable@FreeBSD.ORG
Subject: Re: securing the boot process (again?!?)
In-Reply-To: <xzp4s609rnb.fsf@flood.ping.uio.no>
Message-ID: <Pine.BSF.4.21.0007081916280.7370-100000@netmint.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

>RTFDL (Remove The Floppy Drive, Luke)
>
>DES
>-- 
>Dag-Erling Smorgrav - des@flood.ping.uio.no

By the same token:

RTCDL (Remove The CD-ROM Drive, Luke)
DBFODL (Disable Boot-From-Other-Devices, Luke)
DNBvEL (Disable Network Boot via Ethernet, Luke)
RESPL (Remove External SCSI Port, Luke)

Same applies to keyboard, mouse, USB and other ports.
The case should then be a metal safe box with an ethernet
port, stored in a "cold room" to prevent overheating
and access through ventialation holes...

Andrew



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message