Date: Tue, 04 Apr 2000 07:45:28 -0500 From: Alan Edmonds <alan.edmonds@sterling.com> To: Sheldon Hearn <sheldonh@uunet.co.za> Cc: Andrew <andrew@soc.lg.gov.ua>, Ruslan Ermilov <ru@ucb.crimea.ua>, freebsd-questions@FreeBSD.ORG Subject: Re: Disable boot -s Message-ID: <38E9E3E8.359C0F6@sterling.com> References: <86962.954843435@axl.ops.uunet.co.za>
next in thread | previous in thread | raw e-mail | index | archive | help
Sheldon Hearn wrote:
>
> On Tue, 04 Apr 2000 12:18:13 GMT, Andrew wrote:
>
> > I have FreeBSD mail server in my organisation. It located in room
> > with no lock, with free access to the PC's monitor for all. This is my
> > workbench.
> >
> > I'm afraid that anyone, who knows about boot -s, may reboot the
> > machine and makes me cry.
>
> Okay, I take back my previous advice. Although what I told you about
> flagging the console as insecure was sound advice in some circumstances,
> it's just going to lead you into a false sense of security in this case.
>
> Anyone who knows about boot -s probably also knows how to create boot
> floppies. Getting into your PC won't be very difficult.
>
> Removing the floppy drive from your box may help, provided that you have
> some way of ensuring that nobody opens the box up with a screwdriver or
> saw.
I'm not sure if it was on this list, but one security conscious person
would leave the floppy drive installed, but install it facing into
the case. That way he could remove the system cover if he needed
access to the floppy and didn't have to carry around an extra floppy
drive. As I recall, this was in a classroom situation and he wanted
to prevent students from stealing software and data from the PCs.
I apologize if I got the details wrong and for forgetting who
originally posted this.
Cheers,
--
Alan Edmonds, KB5ZUY Sterling Software
M/S 132
Phone: +1-972-801-6485 5800 Tennyson Pkwy.
Email: alan.edmonds@sterling.com Plano, TX, USA 75024
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?38E9E3E8.359C0F6>