Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 20 Oct 2015 00:06:42 +0000
From:      Glen Barber <gjb@FreeBSD.org>
To:        Warner Losh <imp@bsdimp.com>
Cc:        "freebsd-arch@freebsd.org" <freebsd-arch@freebsd.org>
Subject:   Re: Enabling all available ttys if available console
Message-ID:  <20151020000642.GB20559@FreeBSD.org>
In-Reply-To: <CANCZdfpgopf=-5=bi9XViWMXFe=%2BaknJZ8YZmMF2w6-R0tPEEQ@mail.gmail.com>
References:  <20151019171215.GX15305@FreeBSD.org> <20151019210035.GB15569@FreeBSD.org> <CANCZdfpgopf=-5=bi9XViWMXFe=%2BaknJZ8YZmMF2w6-R0tPEEQ@mail.gmail.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--4bRzO86E/ozDv8r1
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Oct 19, 2015 at 05:09:45PM -0600, Warner Losh wrote:
> On Mon, Oct 19, 2015 at 3:00 PM, Glen Barber <gjb@freebsd.org> wrote:
>=20
> > On Mon, Oct 19, 2015 at 05:12:15PM +0000, Glen Barber wrote:
> > > For several months now, I have been contemplating enabling all active
> > > ttys on the system by 1) changing the defaults from std.9600 to 3wire,
> > > and 2) setting ttyu{0,1,2,3} from 'off' to 'onifconsole'.
> > >
> > > The only drawback to doing this that I can think of is it could open
> > > a potential attack vector, however this would require physical access=
 to
> > > the system.
> > >
> > > The benefit to doing this is the system would be accessible via ttys
> > > other than ttyu0 by default, which unless there is someone with local
> > > access to the system, is painful for administrators to gain console
> > > access remotely by default.
> > >
> > > Are there objections to changing the default, or have I missed someth=
ing
> > > larger in this proposed change?
> > >
> >
> > Based on the replies so far, unless there are no objections by tomorrow,
> > I'll commit the change.
> >
> > Thanks to everyone who replied.
>=20
>=20
> Any chance we  can move the tip entries from 9600 to 115200 too for the
> other direction?
>=20

I don't see why not.

Glen


--4bRzO86E/ozDv8r1
Content-Type: application/pgp-signature; name="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=wVaI
-----END PGP SIGNATURE-----

--4bRzO86E/ozDv8r1--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20151020000642.GB20559>