Re: Disable/Passprotect single user mode

2005-08-29 Thread Artur Grabowski
JSD [EMAIL PROTECTED] writes: That's right. The complete story is that I would like to protect it from my nasty family. :) Erm. Yet another attempt to use a technical solution to solve a social problem. If you don't trust your family, either move out from your mothers home or get a divorce.

Disable/Passprotect single user mode

2005-08-27 Thread JSD
Hi folks, I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. It is a big problem for me and I would like to password protect this single user mode or to totally disable this

Re: Disable/Passprotect single user mode

2005-08-27 Thread Dave Feustel
On Saturday 27 August 2005 06:07, JSD wrote: Hi folks, I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. It is a big problem for me and I would like to password protect

Re: Disable/Passprotect single user mode

2005-08-27 Thread Frank Bax
At 08:27 AM 8/27/05, Dave Feustel wrote: On Saturday 27 August 2005 06:07, JSD wrote: Hi folks, I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. It is a big problem for

Re: Disable/Passprotect single user mode

2005-08-27 Thread Dave Feustel
On Saturday 27 August 2005 07:27, Dave Feustel wrote: On Saturday 27 August 2005 06:07, JSD wrote: Hi folks, I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. It is a

Re: Disable/Passprotect single user mode

2005-08-27 Thread John Kintaro Tate
Edit /etc/ttys and remove the secure option and disable booting from CD/Floppy and set a BIOS password so to change the BIOS you need authentication. Boot authentication is another option however it becomes a pain in the arse when you are away from home and the power goes out, hence your server

Re: Disable/Passprotect single user mode

2005-08-27 Thread kami petersen
Did you miss the line If someone has physical access to my OpenBSD box? With physical access, all of your suggestions are easily bypassed with a bios reset. as you are sure you know, that, along with matt's tip, is about as reasonable advice you can get if you can't physically secure your

Re: Disable/Passprotect single user mode

2005-08-27 Thread Dave Feustel
On Saturday 27 August 2005 09:08, kami petersen wrote: Did you miss the line If someone has physical access to my OpenBSD box? With physical access, all of your suggestions are easily bypassed with a bios reset. as you are sure you know, that, along with matt's tip, is about as

Re: Disable/Passprotect single user mode

2005-08-27 Thread Rogier Krieger
On 8/27/05, JSD [EMAIL PROTECTED] wrote: I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. This is hardly unique to OpenBSD. How about placing your devices in a securely

Re: Disable/Passprotect single user mode

2005-08-27 Thread kami petersen
Dave Feustel skrev: On Saturday 27 August 2005 09:08, kami petersen wrote: Did you miss the line If someone has physical access to my OpenBSD box? With physical access, all of your suggestions are easily bypassed with a bios reset. as you are sure you know, that, along with

Re: Disable/Passprotect single user mode

2005-08-27 Thread JSD
That's right. The complete story is that I would like to protect it from my nasty family. :) They should know the BIOS password to restart my machine when I am away from home but I wouldn't like them to reach single user mode. Thanks for your advice, I think the best way is to edit /etc/ttys and

Re: Disable/Passprotect single user mode

2005-08-27 Thread Dave Feustel
On Saturday 27 August 2005 11:14, kami petersen wrote: dave, what are you smoking? please carefully note how i edited out _your_ text so as to indicate _who_ i was addressing and whom i additionally consider being a smartass. let me rephrase: dear frank. your response is unneccesary and

Re: Disable/Passprotect single user mode

2005-08-27 Thread Tobias Weingartner
On Saturday, August 27, Dave Feustel wrote: On Saturday 27 August 2005 06:07, JSD wrote: I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. It is a big problem for me

Re: Disable/Passprotect single user mode

2005-08-27 Thread Dave Feustel
On Saturday 27 August 2005 12:28, Tobias Weingartner wrote: You BIOS password would prevent the machine from booting automatically after power outtage for example... What! You're not running with backup power??? :-) -- Tired of having to defend against Malware? (You know: trojans, viruses,

Re: Disable/Passprotect single user mode

2005-08-27 Thread black reaper
On 8/27/05, Todd C. Miller [EMAIL PROTECTED] wrote: In message [EMAIL PROTECTED] so spake JSD (sri): I have a big root access problem. If someone has physical access to my OpenBSD box, than he/she can swith into single user mode (-s) and can change the password of root. It is a big

Re: Disable/Passprotect single user mode

2005-08-27 Thread Christian Jones
On 8/27/05, black reaper [EMAIL PROTECTED] wrote: Also, a BIOS password can be easily removed if one has physical access to the box. The small CMOS battery can be popped out, and put back in (on the motherboard), erasing your password. Not always, actually. I have a Dell laptop that's

Re: Disable/Passprotect single user mode

2005-08-27 Thread Dave Feustel
On Saturday 27 August 2005 17:50, Christian Jones wrote: On 8/27/05, black reaper [EMAIL PROTECTED] wrote: Also, a BIOS password can be easily removed if one has physical access to the box. The small CMOS battery can be popped out, and put back in (on the motherboard), erasing your

Re: Disable/Passprotect single user mode

2005-08-27 Thread Rob
Christian Jones wrote: On 8/27/05, black reaper [EMAIL PROTECTED] wrote: Also, a BIOS password can be easily removed if one has physical access to the box. The small CMOS battery can be popped out, and put back in (on the motherboard), erasing your password. Not always, actually. I have a

Re: Disable/Passprotect single user mode

2005-08-27 Thread Roger Neth Jr
: Disable/Passprotect single user mode Date: Sat, 27 Aug 2005 15:50:52 -0700 On 8/27/05, black reaper [EMAIL PROTECTED] wrote: Also, a BIOS password can be easily removed if one has physical access to the box. The small CMOS battery can be popped out, and put back in (on the motherboard), erasing