Alan DuBoff wrote:
> On Friday 04 August 2006 01:56 pm, Garrett D'Amore wrote:
>   
>> In order to do anything with this knowledge the attacker would probably
>> need to have root or physical access to the machine.  And, for the vast,
>> vast majority of cases, just running df -k / will also report this
>> information.  (In theory / might be mounted from somewhere other than
>> the default boot settings for the prom, but I consider that case very
>> very rare.)
>>     
>
> I agree, but that's why I wanted to hear what Casper or Darren thought. They 
> would know best about something like that.
>
> In general they can see some things by looking at the system, so maybe that 
> doesn't matter anyway, like a boot device. I didn't know if folks could have 
> a specific device manage boot, but another disk to actually boot the OS (GRUB 
> vs /boot), or if that was even sensitive information.
>
> It's a real shame that OBP is not used on PCs...because the BIOS situation on 
> x86 seems to be completely fubar.
>
>   

Indeed it is.  And since Vista appears to be the first Microsoft OS to
support anything _besides_ BIOS (EFI in this case), I think we're stuck
with it for the foreseeable future.  Eventually once nobody cares about
supporting anything older than Vista on their hardware, manufacturers
might consider moving away from BIOS.

-- 
Garrett D'Amore, Principal Software Engineer
Tadpole Computer / Computing Technologies Division,
General Dynamics C4 Systems
http://www.tadpolecomputer.com/
Phone: 951 325-2134  Fax: 951 325-2191

_______________________________________________
opensolaris-code mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/opensolaris-code

Reply via email to