From owner-freebsd-hackers  Sun Nov  7  0:31:49 1999
Delivered-To: freebsd-hackers@freebsd.org
Received: from peach.ocn.ne.jp (peach.ocn.ne.jp [210.145.254.87])
	by hub.freebsd.org (Postfix) with ESMTP
	id 7EE5814C31; Sun,  7 Nov 1999 00:31:47 -0800 (PST)
	(envelope-from dcs@newsguy.com)
Received: from newsguy.com (p24-dn03kiryunisiki.gunma.ocn.ne.jp [210.232.224.153])
	by peach.ocn.ne.jp (8.9.1a/OCN) with ESMTP id RAA25324;
	Sun, 7 Nov 1999 17:31:12 +0900 (JST)
Message-ID: <3825384E.C6214B61@newsguy.com>
Date: Sun, 07 Nov 1999 17:29:02 +0900
From: "Daniel C. Sobral" <dcs@newsguy.com>
X-Mailer: Mozilla 4.7 [en] (Win98; I)
X-Accept-Language: en,pt-BR,ja
MIME-Version: 1.0
To: Alexey Zelkin <phantom@FreeBSD.ORG>
Cc: Mike Smith <mike@smith.net.au>, hackers@freebsd.org
Subject: Re: loader security problem
References: <19991105222636.B27448@scorpion.crimea.ua> <199911060019.QAA00813@dingo.cdrom.com> <19991107000520.A23479@scorpion.crimea.ua>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Alexey Zelkin wrote:
> 
> IMHO, it would be nice to have password protected loader(8) (like linux lilo)
> or just ACLs for loader(8)'s "more" command (like unavailable for viewing
> files)

cat >/boot/passwd.4th <<EOF
: password s" xyzzy" ;
: bell 7 emit ;
: getpasswd  { addr len | ptr -- ptr }
  0 to ptr
  0 to flag
  begin
    key
    dup 13 = if exit then
    dup 8 = if
      ptr 0 = if bell else ptr 1 - to ptr ( 8 ) emit bl emit 8 emit
then
    else
      ptr len < if
        addr ptr + c!
      else
        drop
      then
      ptr 1 + to ptr
      [char] * emit
    then
  0 until
;
create passbuf 20 allot
: askpasswd
  ." password: "
  passbuf 20 getpasswd
  passbuf swap password compare 0=
  if exit then
  0 reboot
;
autoboot
askpasswd
EOF
echo "include /boot/passwd.4th" >> /boot/loader.rc

Say... does LILO have a scripting language?

--
Daniel C. Sobral			(8-DCS)
dcs@newsguy.com
dcs@freebsd.org

	What y'all wanna do?
	Wanna be hackers? Code crackers? Slackers
	Wastin' time with all the chatroom yakkers?


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message