On 4/18/06, Nate Steffan <[EMAIL PROTECTED]> wrote:
> Scott Ullrich wrote:
>
> >On 17 Apr 2006 16:16:37 -0500, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
> >
> >
> >>After bootup I would not like to show the pfsense menu. This is a security
> >>risk for me as pressing 8 will give a root shell. I would instead like to
> >>just show a login prompt as with any normal Freebsd machine.
> >>
> >>
> >
> >System -> Advanced -> Disable console menu
> >
> >
> >
> >>Also, why
> >>won't my chpass changes maintain after reboot? I would like to use bash as
> >>my shell, however it will always default to /bin/sh on reboot. One more
> >>thing, does the pfsense distro still recognize /etc/rc.conf? I tried
> >>installing powerdns, however the rc.d script will not run?
> >>
> >>
> >
> >You should use the webConfigurator password function to maintain the
> >root and admin accounts.
> >
> >Scott
> >
> >---------------------------------------------------------------------
> >To unsubscribe, e-mail: [EMAIL PROTECTED]
> >For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> I tried disabling the console menu as stated, however it still is not
> disabled.  This is very important to me as I will be using this box as a
> frontend that a number of people will be logging into and not having
> access to the root account is very important.  I looked at the php code
> as I am a php developer myself, and I see that
> /var/etc/disableconsolemenu is created, however the console is still
> showing up.  Bug possibly?
>
> Also were do I maintain the root account.  I dont see anywhere to change
> the shell or password.  Is there some config file I need to edit?
>
The admin id == the root account.  Displaying a login prompt will only
stop non-authorized people from gaining access, not authorized admins
from gaining root.  We do have a user manager in HEAD that will do
what you wish, but that won't make it into 1.0.

Aside from that - I was just able to duplicate the console menu not
being disabled issue.  Looks like you found a bug, can you please file
a ticket on it at http://cvstrac.pfsense.org/ ?  Thanks

--Bill

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to