On 6/5/07, Tracy R Reed <[EMAIL PROTECTED]> wrote:
You password protect your grub? When I run into a password protected
grub I just boot it from floppy or USB key or PXE boot over the network
or if the BIOS itself is passworded I just pull the whole drive out.

Your manliness runneth over, Tracy.

> key-based auth for root?  Not happening, even if it wasn't disallowed
> by the DoD.

That's a shame because it actually provides better security, as I noted
above.

One wonders why DoD would specifically disallow it.  If you could
integrate a RSA hard token kind of setup with each box's root access,
that seems like a much better idea than passwords alone.  A lot of
overhead, sure, but for a significant gain in security.  One wonders
why DoD would actually forbid such a setup.

-todd


--
[email protected]
http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-list

Reply via email to