*BSD News Article 24671


Return to BSD News archive

Path: sserve!newshost.anu.edu.au!munnari.oz.au!news.Hawaii.Edu!ames!agate!howland.reston.ans.net!EU.net!sun4nl!tuegate.tue.nl!news.win.tue.nl!wzv.win.tue.nl!gvr.win.tue.nl!guido
From: guido@gvr.win.tue.nl (Guido van Rooij)
Newsgroups: comp.os.386bsd.questions
Subject: Re: Security question
Date: 4 Dec 1993 10:43:55 GMT
Organization: Eindhoven University of Technology, The Netherlands
Lines: 24
Message-ID: <2dpplb$bkl@wzv.win.tue.nl>
References: <2dodgn$s9s@bigboote.WPI.EDU>
NNTP-Posting-Host: gvr.win.tue.nl

hmctague@wpi.edu (Henry R McTague) writes:

>	How do you assure the security of PC running FreeBSD, and being used
>  as an X windows workstation?  During the boot process, I can escape into
>  single user mode as root.  Now I can remount the file system as r/w and
>  change the root password.  For that matter, I can do almost anything I want.
>  Essentially I am asking, how can you assure security when anyone has access
>  to the console?

>== hmctague@wpi.edu	==
>== Henry R McTague	==
You can take another init(8). There is one that makes the system asked
for the root password when
1) you boot single user
2) /dev/console is secure in /etc/ttys

Further you can disable the ctrl-alt-del sequence if you like to.

-Guido
-- 
Guido van Rooij                 |  Internet: guido@gvr.win.tue.nl
Bisschopsmolen 16               |  Phone:    ++31.40.461433
5612 DS Eindhoven               |  ((12+144+20)+3*sqrt(4))/7 
The Netherlands                 |    +(5*11)=9^2+0