Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 Dec 1998 00:24:05 -0600 (CST)
From:      Michael Borowiec <mikebo@Mcs.Net>
To:        questions@FreeBSD.ORG
Subject:   Securing the FreeBSD console
Message-ID:  <199812090624.AAA12484@Mars.mcs.net>

next in thread | raw e-mail | index | archive | help
Greetings -
Just when I think I've got my FreeBSD console relatively secure with
xlock, someone else shows up with a new key combination to easily
circumvent it...

To prevent people from killing your X-Server with Ctrl-Alt-Backspace
requires a simple mod to /etc/XF86Config - NoZap. Covered...

To prevent rebooting your server with a Ctrl-Alt-Del requires
a kernel config change. Where is this documented?

Xlock is useless with the sc0 console driver, since typing Ctrl-Alt-F1
breaks out of graphics mode, back to the virtual terminal. Then one simply
does a Ctrl-C and they're in... How can this be disabled?

Anyone know of any other knuckle-head methods to break xlock?
(besides pulling the power cord out ;v)

Anyone know why FreeBSD ships with all these security holes enabled by
default? I checked the FreeBSD Security web page, and there was no mention
of any of these "features", or how to plug them. (Did I miss something?)

Any pointers would be welcome. Thanks!
Regards,
- Mike

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199812090624.AAA12484>