Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Dec 1996 11:48:16 -0600
From:      Tyson <tysonb@gw2kbbs.com>
To:        Igor Roshchin <igor@alecto.physics.uiuc.edu>
Cc:        freebsd-security@freebsd.org
Subject:   Re: stopping users from rebooting with ctr-alt-del
Message-ID:  <32BAD160.E46@gw2kbbs.com>
References:  <199612201504.JAA23349@alecto.physics.uiuc.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
Igor Roshchin wrote:

> In a public place I would also disable "reset" and "power" button
> <grin>

This illustrates the need for physical security. Any terminal other
than console and possibly an alternate has no business being able to
reboot the cpu.  So far as security on PC's goes, I would also mention
that it is a good idea to operate on a least priviledge mode when
thinking security. I go so far as to pull the screws from the floppy drive,
push the floppy further inside the case, and slap a bay cover on top.
Same for CD-ROM's. It's the out of sight, out of mind principle. The
newer ATX cases present some good possibilities as well, as now you
can move/hide the power switch as well as the reset switch. 
 Even then I wind up hearing about a luser who tries to get around
that.  I usually then point them to the "Simon, BOFH" documents, and ask
them if they'd like that.  For some reason, they start to behaving
themselves.  I wonder why. };-)
>



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?32BAD160.E46>