Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 22 Sep 2004 10:51:25 +0100
From:      Steve Lalonde <steve@enta.net>
To:        Per Engelbrecht <per@xterm.dk>
Cc:        freebsd-isp@freebsd.org
Subject:   Re: funny customers
Message-ID:  <41514B1D.2030603@enta.net>
In-Reply-To: <53103.62.242.151.142.1095841227.squirrel@mailbox.wingercom.dk>
References:  <53103.62.242.151.142.1095841227.squirrel@mailbox.wingercom.dk>

next in thread | previous in thread | raw e-mail | index | archive | help
Per Engelbrecht wrote:
> Hi All
> 
> I'm administering a mid-size serverhosting site and have a problem with
> customers enabling root passwd in single-user mode.
> It's the same customers that set up fake payment sites, do serious
> hacking  (i.e. not good, productive hacking) mailspamming and so on.
> 
> In order to collect information for a criminal case (yes, in some cases
> we go all the way) I need a way to get into these boxes (mostly
> FreeBSD's) but I can't think of a way to disable the prompt for root
> passwd in single-user mode.
> Know it's a wildcard, but I've been looking at 'set' options under
> 'boot'  and a way to mount the serverdisk on another fbsd installation,
> but without any luck.
> 
> Any help would be appreciatet. Thank you.
> 
> respectfully
> /per
> per@xterm.dk
> 
> 
> 
> _______________________________________________
> freebsd-isp@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-isp
> To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
Hi

Can you not remove the disk and mount it in an alternate box to get 
access to the data you need?

-- 
Steve Lalonde RTFM
Chief Technical Officer
Entanet International Ltd
http://www.enta.net/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?41514B1D.2030603>