From owner-freebsd-questions@FreeBSD.ORG Wed Nov 22 03:53:22 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 85E9816A40F for ; Wed, 22 Nov 2006 03:53:22 +0000 (UTC) (envelope-from on@cs.ait.ac.th) Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16]) by mx1.FreeBSD.org (Postfix) with ESMTP id 7B8AB43D6E for ; Wed, 22 Nov 2006 03:52:50 +0000 (GMT) (envelope-from on@cs.ait.ac.th) Received: from banyan.cs.ait.ac.th (banyan.cs.ait.ac.th [192.41.170.5]) by mail.cs.ait.ac.th (8.13.1/8.12.11) with ESMTP id kAM3qMiw063366 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO); Wed, 22 Nov 2006 10:52:22 +0700 (ICT) Received: (from on@localhost) by banyan.cs.ait.ac.th (8.13.3/8.12.11) id kAM3rJ1u012005; Wed, 22 Nov 2006 10:53:19 +0700 (ICT) Date: Wed, 22 Nov 2006 10:53:19 +0700 (ICT) Message-Id: <200611220353.kAM3rJ1u012005@banyan.cs.ait.ac.th> From: Olivier Nicole To: maanjee@gmail.com In-reply-to: <2cd0a0da0611211941iae07787q3f433fb2c8ab1f22@mail.gmail.com> (message from VeeJay on Wed, 22 Nov 2006 04:41:37 +0100) References: <2cd0a0da0611211941iae07787q3f433fb2c8ab1f22@mail.gmail.com> X-Virus-Scanned: on CSIM by amavisd-milter (http://www.amavis.org/) Cc: freebsd-questions@freebsd.org, maanjee@gmail.com Subject: Re: Password Security X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Nov 2006 03:53:22 -0000 > I am going to place my FreeBSD server at a shared place? > > I am just afraid that any unauthorized person might boot machine in single > user mode and steal the data? If the data are so sensible, do notplace the machine in a shared location. One could reboot in single mode, or just stop the machine and remove the hard disk to analyze it at his own pace. Single user password tends to give a false sense of security, if one has physical access to the machine, consider he has open access to the data stored on the machine. best regards, olivier