From owner-freebsd-arch@FreeBSD.ORG Tue Jul 22 20:50:07 2003 Return-Path: Delivered-To: freebsd-arch@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EB22437B401 for ; Tue, 22 Jul 2003 20:50:07 -0700 (PDT) Received: from troutmask.apl.washington.edu (troutmask.apl.washington.edu [128.208.78.105]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4B77343FB1 for ; Tue, 22 Jul 2003 20:50:07 -0700 (PDT) (envelope-from sgk@troutmask.apl.washington.edu) Received: from troutmask.apl.washington.edu (localhost [127.0.0.1]) h6N3o6h5045434; Tue, 22 Jul 2003 20:50:06 -0700 (PDT) (envelope-from sgk@troutmask.apl.washington.edu) Received: (from sgk@localhost)h6N3o6km045433; Tue, 22 Jul 2003 20:50:06 -0700 (PDT) Date: Tue, 22 Jul 2003 20:50:06 -0700 From: Steve Kargl To: Mike Makonnen Message-ID: <20030723035006.GA45410@troutmask.apl.washington.edu> References: <20030719171138.GA86442@dragon.nuxi.com> <20030721202314.GC21068@dragon.nuxi.com> <20030722151138.GB72888@dragon.nuxi.com> <20030722153056.GM863@starjuice.net> <20030723002531.GA44452@kokeb.ambesa.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20030723002531.GA44452@kokeb.ambesa.net> User-Agent: Mutt/1.4.1i cc: freebsd-arch@freebsd.org Subject: Re: Things to remove from /rescue X-BeenThere: freebsd-arch@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussion related to FreeBSD architecture List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 23 Jul 2003 03:50:08 -0000 On Tue, Jul 22, 2003 at 08:25:32PM -0400, Mike Makonnen wrote: > > So let me restate DES case without examples. > > > > It may be that someone wishing to recover a hosed box will both > > > > a) want access to some network-hosted resource, and > > >From what I can see the only network resource one could access is an > nfs mount, since it seems unlikely you could rely on anything > outside /rescue (such as ftp or ssh) being available. > > > b) want to maintain network security while accessing that resource. > > What security? There are no network services running in single-user, > so what is there to secure? > Don't you need a network connection to use /rescue/rrestore to access the dump of / on a tape drive in a remote system? One may want a secure connection to that remote system. -- Steve