Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 12 Jan 2000 01:34:51 -0600
From:      Nathan Kinsman <nathank@mentisworks.com>
To:        Adam Laurie <adam@algroup.co.uk>
Cc:        freebsd-security@freebsd.org
Subject:   Re: console disappears after reboot
Message-ID:  <387C2E9B.ACEC62AD@mentisworks.com>
References:  <387B9043.62415CF3@algroup.co.uk>

next in thread | previous in thread | raw e-mail | index | archive | help
Adam Laurie wrote:
> 
> Hi,
> 
> I realise this is slightly off topic, but as the situation arises due to
> a security procedure, I hope someone else here as already seen similar
> problems...
> 
> I am working at a facility that has a locked server room with an annexe
> just outside where you can access the servers without being in the
> cold/noise. For security reasons, the vga/keyboard switch that feeds the
> annexe is switched off when there's no-one there. This setup has worked
> fine for a number of years. However, we are now installing some new
> servers and we've found that if they get rebooted when the switch is
> off, the console gets changed to a serial device. This means we've lost
> the machine(s) until we log in remotely and reboot again. Not good.
> 
> It seems that FreeBSD 3.1+ scans for a console, and if it can't find kb
> / vga it switches to serial. The old machines all work fine as they are
> 3.0 or less.
> 
> I know I can set the console device in /boot/loader.conf, but this leads
> to other problems (possibly a bug here): on some machines we get a
> "/boot/loader not found - Disk error 0x1", and we suspect that this is
> to do with the boot partition not being constrained to the first 1024
> cylinders.
> 
> Anyway, to cut a long story short, I would prefer to simply do something
> in /etc/rc.local to force the console back to local kb/vga, or disable
> the serial console in the kernel itself... so my question is: what? Is
> there such a command/setting?

This is from /usr/src/sys/i386/conf/LINT:

# `flags' for atkbd:
#       0x01    Force detection of keyboard, else we always assume a
keyboard

have you tried this in your kernel config?

> 
> cheers,
> Adam
> --
> Adam Laurie                   Tel: +44 (181) 742 0755
> A.L. Digital Ltd.             Fax: +44 (181) 742 5995
> Voysey House
> Barley Mow Passage            http://www.aldigital.co.uk
> London W4 4GB                 mailto:adam@algroup.co.uk
> UNITED KINGDOM                PGP key on keyservers
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

-- 
Nathan Kinsman


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?387C2E9B.ACEC62AD>