Date: Mon, 19 Oct 2015 21:00:35 +0000 From: Glen Barber <gjb@FreeBSD.org> To: freebsd-arch@FreeBSD.org Subject: Re: Enabling all available ttys if available console Message-ID: <20151019210035.GB15569@FreeBSD.org> In-Reply-To: <20151019171215.GX15305@FreeBSD.org> References: <20151019171215.GX15305@FreeBSD.org>
next in thread | previous in thread | raw e-mail | index | archive | help
--s2ZSL+KKDSLx8OML
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
On Mon, Oct 19, 2015 at 05:12:15PM +0000, Glen Barber wrote:
> For several months now, I have been contemplating enabling all active
> ttys on the system by 1) changing the defaults from std.9600 to 3wire,
> and 2) setting ttyu{0,1,2,3} from 'off' to 'onifconsole'.
>=20
> The only drawback to doing this that I can think of is it could open
> a potential attack vector, however this would require physical access to
> the system.
>=20
> The benefit to doing this is the system would be accessible via ttys
> other than ttyu0 by default, which unless there is someone with local
> access to the system, is painful for administrators to gain console
> access remotely by default.
>=20
> Are there objections to changing the default, or have I missed something
> larger in this proposed change?
>=20
Based on the replies so far, unless there are no objections by tomorrow,
I'll commit the change.
Thanks to everyone who replied.
Glen
--s2ZSL+KKDSLx8OML
Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQIcBAEBCAAGBQJWJVnyAAoJEAMUWKVHj+KTM6EP/i2laUNf1kzjCueIpZHCiSq5
hOqbr2JoITVOV4exXSiUZ0SkIqRa0PDiP/yj8f2eWi0cs2h8VTpTNT+XefD+g1NL
MIvBCJ7n4zoj397FM5LXGtnTVHoUN+k/x8meBZJ1VnkY3ECWE2kiXX4vjQu+b7bk
4aA3I0vUxrXT/2iF8PNXnwwnaeIhwOmUHyKiBRuwU0868hZCfSQimUIWpsnVgaTh
CojBf8X2r/1+wZwPMLSlWBdWRapz7+rCtLbpJIsM/9/KheTl87p/ip3KzhlJlTRi
1ely0zHdJ23j2vXx8y56qlPI3jXpQ/vil/hyIRm/KDJD+5vFaxOpoXEZ5G0VUmDY
Qwjq+MRzpOjXcpO6/RumhhomWS2fmeaJb9ri4pk0OiEEGUGcR70/apX8YdWI24t7
E2opm5JN59BklhWVreHLeWbQOOwi0QI+hc9qUr3QrxSqJk3T1S+NXwU+kBZnR5dD
OlUTxhmivjhF7/TkME6VM4JV0wcp4TJK1EeSopMKMlmAs8c/6mWthCplM/X+1dEC
KLG2g+YZ2xv6WFYuGIb4/RKkke35sowltuXQBkimgy0VwtQgmjulfr1eNYVvykr9
iiDs9L8vH28IE0/1JpX1sWSdbQ3hlxEdEMtX0X2YxEdwvqWqR3wi25RwsV5Lz+au
utPZA/NRsOBTaTAcJghT
=bJeY
-----END PGP SIGNATURE-----
--s2ZSL+KKDSLx8OML--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20151019210035.GB15569>