Date: Sun, 01 Feb 1998 21:29:15 +0000 From: Karl Pielorz <kpielorz@tdx.co.uk> To: "David E. Cross" <dec@phoenix.its.rpi.edu> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: FreeBSD boot banner (securing FreeBSD) Message-ID: <34D4E92B.C0BA0172@tdx.co.uk> References: <Pine.BSF.3.96.980201160051.2916A-100000@phoenix.its.rpi.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
Hmmm.... I still don't think it's going to be possible unless you remove the floppy and padlock the case... I've seen some 'mean' floppy-drive locks though (not like the usual plastic affairs) which might make it more feasable just to lock the drive up... As for getting round the security with 2 disks, well you can do it with 1 for NT, and I seem to remember being able to boot the old SCO system I used to run off a floppy - and then mount the root filesystems etc. (though it wasn't running C2 trusted)... You could always set a BIOS password on the machine, make sure the case is very well secured (back to padlock again) - and disable the machine booting from the Floppy drive - which at least leaves it free for usage once booted? Regards, Kp David E. Cross wrote: > > On Sat, 31 Jan 1998, Karl Pielorz wrote: > > > Remove the floppy drive? - and secure the case (with a padlock)?... > > I am not looking for that level of security; I am mostly just curious. > By the same token, I am hoping that there would be some way of preventing > a person from circumventing FreeBSDs security than just walking up to a > machine with 2 disks. Sun, with their NVRAM password accomplishes this; > you need to actually open the case (which can also be easily secured), and > without loosing functionality. The equivalent solution that I can see is > to remove the floppy drive, and that looses the functionality of the > floppy drive from within the program. > > -- > David Cross > UNIX Systems Administrator > GE Corporate R&D
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?34D4E92B.C0BA0172>