Date: Wed, 16 May 2012 12:28:47 +0200 From: Fabian Wenk <fabian@wenks.ch> To: freebsd-security@freebsd.org Subject: Re: Single user mode Message-ID: <4FB3815F.8000208@wenks.ch> In-Reply-To: <CAFHbX1KGuMEpUUJibYXpzQbGRmdZgtgk1ZUMqYX2Rm9qC0W==g@mail.gmail.com> References: <CAL5m1BsnURTXsZJEkF9sR-3wsVRHkOto-CuCSuJCgH2yivNGPg@mail.gmail.com> <7439f3d4019914591b036aa45cfd75e7@vahid-shokouhi.net> <CAL5m1BtxL_=jGKE=xbKqJxaxnuscid_5LJXwPNpZz8AEmpQuaA@mail.gmail.com> <40e269c44ec592d0ce3e2d85fd8a032d@vahid-shokouhi.net> <CAL5m1Bt2RQ_%2BW5qV9TN4G5VtCAj8VD4UkLCTwQR2OMSyi2iVTA@mail.gmail.com> <c8a82efd162ce1d32a9a05ed6d78557e@vahid-shokouhi.net> <CAL5m1Bsu7M9qZ3xt7U4H9v-jBDWdf-q1M=Y=v5NTy9QPGcLORQ@mail.gmail.com> <CAL5m1BtpNomf8qUONOHf2i-jPyRrPK7ZRvH3nsePStZuEQ_UmQ@mail.gmail.com> <CAFHbX1KGuMEpUUJibYXpzQbGRmdZgtgk1ZUMqYX2Rm9qC0W==g@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hello On 16.05.2012 11:06, Tom Evans wrote: > You can fix boot order in the BIOS, but a BIOS can be reset simply by > removing the BIOS battery briefly. In addition to that, many BIOS will > also offer a boot menu option - which cannot be disabled - allowing > the user to choose which device to boot from without entering the > BIOS. In addition you should use computer cases, which can be prevented from opening with a padlock. So removing the hard disk or resetting the BIOS needs a lot more effort. Also you should chain the computer to something, which is fixed to the building, so it can not be removed easily. I do know student computer rooms with Linux workstations, which are "protected" with this measures. But there is also the regular system monitoring in place, and if a systems goes down unexpected, you will know it and can do something about it. bye Fabian
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4FB3815F.8000208>