From owner-freebsd-bugs Mon May 3 18:40: 5 1999 Delivered-To: freebsd-bugs@freebsd.org Received: from freefall.freebsd.org (freefall.FreeBSD.ORG [204.216.27.21]) by hub.freebsd.org (Postfix) with ESMTP id C1BFD14EA4 for ; Mon, 3 May 1999 18:40:01 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.9.3/8.9.2) id SAA05331; Mon, 3 May 1999 18:40:01 -0700 (PDT) (envelope-from gnats@FreeBSD.org) Date: Mon, 3 May 1999 18:40:01 -0700 (PDT) Message-Id: <199905040140.SAA05331@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Chris Costello Subject: Re: misc/11475: Possible security hazard? Reply-To: Chris Costello Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org The following reply was made to PR misc/11475; it has been noted by GNATS. From: Chris Costello To: "G. Adam Stanislav" Cc: FreeBSD-gnats-submit@FreeBSD.ORG Subject: Re: misc/11475: Possible security hazard? Date: Mon, 3 May 1999 20:31:40 -0500 On Mon, May 3, 1999, G. Adam Stanislav wrote: > > >Number: 11475 > >Category: misc > >Synopsis: Any user can reboot > >Confidential: no > >Severity: non-critical > >Priority: low > >Responsible: freebsd-bugs > >State: open > >Quarter: > >Keywords: > >Date-Required: > >Class: sw-bug > >Submitter-Id: current-users > >Arrival-Date: Mon May 3 18:20:01 PDT 1999 > >Closed-Date: > >Last-Modified: > >Originator: G. Adam Stanislav > >Release: FreeBSD 3.1-RELEASE i386 > >Organization: > Whiz Kid Technomagic > >Environment: > > FreeBSD 31.-RELEASE, local console > > >Description: > > While only a superuser can execute the reboot command, any user can > accomplish the same thing by pressing ctl-alt-delete. *Sigh*, had you read the LINT kernel config or the man page: options SC_DISABLE_REBOOT # disable reboot key sequence syscons, sc - the console driver SYNOPSIS options "MAXCONS=N" options "SC_DISABLE_REBOOT" ^^^^^^^^^^^^^^^^^ [...] SC_DISABLE_REBOOT This option disables the ``reboot'' key (by default, it is Ctl- Alt-Del ), so that the casual user may not accidentally reboot the system. > > >How-To-Repeat: > > Log on as an ordinary user and press ctl-alt-delete. > > >Fix: > > Unknown > > > >Release-Note: > >Audit-Trail: > >Unformatted: > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-bugs" in the body of the message > -- Chris Costello The next generation of computers will have a "Warranty Expired" interrupt. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message