From owner-freebsd-isp@FreeBSD.ORG Wed Sep 22 09:51:27 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id F3FC216A4CE for ; Wed, 22 Sep 2004 09:51:26 +0000 (GMT) Received: from smtp.enta.net (smtp.enta.net [195.74.97.230]) by mx1.FreeBSD.org (Postfix) with ESMTP id 8C69843D68 for ; Wed, 22 Sep 2004 09:51:26 +0000 (GMT) (envelope-from steve@enta.net) Received: from [195.74.96.98] (steve2.enta.net [195.74.96.98]) by smtp.enta.net (Postfix) with ESMTP id C135D99F3C; Wed, 22 Sep 2004 11:00:18 +0100 (BST) Message-ID: <41514B1D.2030603@enta.net> Date: Wed, 22 Sep 2004 10:51:25 +0100 From: Steve Lalonde Organization: Entanet International Ltd User-Agent: Mozilla Thunderbird 0.8 (Windows/20040913) X-Accept-Language: en-us, en MIME-Version: 1.0 To: Per Engelbrecht References: <53103.62.242.151.142.1095841227.squirrel@mailbox.wingercom.dk> In-Reply-To: <53103.62.242.151.142.1095841227.squirrel@mailbox.wingercom.dk> X-Enigmail-Version: 0.86.1.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit cc: freebsd-isp@freebsd.org Subject: Re: funny customers X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Sep 2004 09:51:27 -0000 Per Engelbrecht wrote: > Hi All > > I'm administering a mid-size serverhosting site and have a problem with > customers enabling root passwd in single-user mode. > It's the same customers that set up fake payment sites, do serious > hacking (i.e. not good, productive hacking) mailspamming and so on. > > In order to collect information for a criminal case (yes, in some cases > we go all the way) I need a way to get into these boxes (mostly > FreeBSD's) but I can't think of a way to disable the prompt for root > passwd in single-user mode. > Know it's a wildcard, but I've been looking at 'set' options under > 'boot' and a way to mount the serverdisk on another fbsd installation, > but without any luck. > > Any help would be appreciatet. Thank you. > > respectfully > /per > per@xterm.dk > > > > _______________________________________________ > freebsd-isp@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-isp > To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org" Hi Can you not remove the disk and mount it in an alternate box to get access to the data you need? -- Steve Lalonde RTFM Chief Technical Officer Entanet International Ltd http://www.enta.net/