Date: Sat, 27 Nov 2004 15:43:44 -0500 From: Bill Moran <wmoran@potentialtech.com> To: Lowell Gilbert <freebsd-questions-local@be-well.ilk.org> Cc: freebsd-questions@freebsd.org Subject: Re: Breaking password on FreeBSD 5.2.1 box Message-ID: <20041127154344.633e80ce.wmoran@potentialtech.com> In-Reply-To: <44llcn2fie.fsf@be-well.ilk.org> References: <1101392541.29769.409.camel@localhost.localdomain> <41A8A94C.8070509@nbritton.org> <20041127131235.7025033b.wmoran@potentialtech.com> <44llcn2fie.fsf@be-well.ilk.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Lowell Gilbert <freebsd-questions-local@be-well.ilk.org> wrote: > Bill Moran <wmoran@potentialtech.com> writes: > > > Edit /etc/ttys and mark the console "insecure" and try it again. > > > > You'll find you can't get in without the password when that change has > > been made. That configuration is the correct thing to do when you can't > > guarantee the physical security of the machine. > > To be more precise, it covers the case where the machine *is* > physically secure, but its console is not. Obviously, if the machine > is sufficiently insecure that someone could boot off a floppy, it > doesn't matter what /etc/ttys says. Yeah, that's what I meant. Thanks for clarifying my sloppy explanation. -- Bill Moran Potential Technologies http://www.potentialtech.com
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20041127154344.633e80ce.wmoran>