Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 5 Dec 2003 12:36:22 -0500 (EST)
From:      Dru <dlavigne6@sympatico.ca>
To:        Nathan Kinkade <nkinkade@ub.edu.bz>
Cc:        questions@freebsd.org
Subject:   Re: protecting loader
Message-ID:  <20031205123457.D624@genisis>
In-Reply-To: <20031204220312.GC15894@npkfbsd>
References:  <20031204141547.T598@genisis> <20031204220312.GC15894@npkfbsd>

next in thread | previous in thread | raw e-mail | index | archive | help


On Thu, 4 Dec 2003, Nathan Kinkade wrote:

> On Thu, Dec 04, 2003 at 02:20:07PM -0500, Dru wrote:
> >
> > Is there a way to prevent a user from bypassing loader and
> > loading/unloading stuff at the OK prompt? (other than physical security
> > measures)
> >
> > I tried placing "/boot/loader -n" in "/boot.config", but it didn't make a
> > difference.
> >
> > Dru
>
> If I understand your question, you could put the following line in your
> /boot/loader.conf file:
>
> autoboot_delay="0"
>
> I think this will effectively prevent users from interrupting the loader
> to make changes.  Just make sure that you have some other way to boot
> the system, such as a floppy, in case you later run into problems.
>
> Nathan
> --
> gpg --keyserver pgp.mit.edu --recv-keys D8527E49


Actually, I discovered that "password=somevalue" in /boot/loader.conf
filled the bill quite nicely :-)

Dru



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20031205123457.D624>