Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 2 Dec 1996 23:21:42 -0500 (EST)
From:      James FitzGibbon <james@nexis.net>
To:        Joe Diehl <joed@telecom.ksu.edu>
Cc:        freebsd-security@freebsd.org
Subject:   Re: Securing the freebsd boot process
Message-ID:  <Pine.BSI.3.95.961202232032.10881A-100000@teamos2.org>
In-Reply-To: <199612030007.SAA22848@telecom.ksu.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 2 Dec 1996, Joe Diehl wrote:

> This has probably been discussed a few times in the passed, but I wasn't
> around then, so...
> 
> Is there anyway to increase the security of a FreeBSD machine at boot
> time?  The two points of concern are booting into single user mode
> without a password, and hitting Ctrl-C repeatedly while /etc/rc is 
> executing.  Naturally, either of the two will drop the machine to a
> root shell.

I'm not sure about the /etc/rc issue, but changing /etc/ttys so
that 'console' is insecure instead of the default 'secure' will require
that the root password be entered for single user mode.

--
j.

----------------------------------------------------------------------------
| James FitzGibbon                                         james@nexis.net |
| Integrator, The Nexis Group                     Voice/Fax : 416 410-0100 |
----------------------------------------------------------------------------




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.3.95.961202232032.10881A-100000>