Skip site navigation (1)Skip section navigation (2)
Date:      27 Nov 2004 15:39:21 -0500
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        freebsd-questions@freebsd.org
Subject:   Re: Breaking password on FreeBSD 5.2.1 box
Message-ID:  <44llcn2fie.fsf@be-well.ilk.org>
In-Reply-To: <20041127131235.7025033b.wmoran@potentialtech.com>
References:  <1101392541.29769.409.camel@localhost.localdomain> <41A8A94C.8070509@nbritton.org> <20041127131235.7025033b.wmoran@potentialtech.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Bill Moran <wmoran@potentialtech.com> writes:

> Edit /etc/ttys and mark the console "insecure" and try it again.
> 
> You'll find you can't get in without the password when that change has
> been made.  That configuration is the correct thing to do when you can't
> guarantee the physical security of the machine.

To be more precise, it covers the case where the machine *is*
physically secure, but its console is not.  Obviously, if the machine
is sufficiently insecure that someone could boot off a floppy, it
doesn't matter what /etc/ttys says.

Be well.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?44llcn2fie.fsf>