OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Weldon S Godfrey 3 (weldonexcelsus.com)
Date: Wed Feb 06 2002 - 07:19:15 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Good point.

    I recommend that any box placed into a colo or a location that the
    security isn't under your direct control to mark your console as
    "insecure" in /etc/ttys so that root password will be asked when someone
    boots into single user mode.

    Weldon

    If memory serves me right, sometime around Yesterday, Brett Glass told me:

    > In a word, yes. Looks like they went to the box with a
    > keyboard and a mouse, rebooted, and tried to log in.
    > Clearly, they were so clueless that they did not know
    > about single-user mode.
    >
    > --Brett
    >
    > At 10:50 AM 2/5/2002, Victor Grey wrote:
    >
    > -----------------------------
    > >Feb 3 23:56:20 p2 syslogd: exiting on signal 15
    > ><snip>
    > >Feb 3 23:58:59 p2 /kernel: FreeBSD 4.4-RELEASE-p2 #0: Wed Dec 26 12:01:30
    > >PST 2001
    > ><snip>
    > >Feb 3 23:59:00 p2 /kernel: psm0: <PS/2 Mouse> irq 12 on atkbdc0
    > >Feb 3 23:59:00 p2 /kernel: psm0: model Generic PS/2 mouse, device ID 0
    > ><snip>
    > >Feb 4 00:43:38 p2 login: 3 LOGIN FAILURES ON ttyv0
    > >Feb 4 00:43:38 p2 login: 3 LOGIN FAILURES ON ttyv0, root
    > >-----------------------------
    >
    >
    > To Unsubscribe: send mail to majordomoFreeBSD.org
    > with "unsubscribe freebsd-security" in the body of the message
    >

    To Unsubscribe: send mail to majordomoFreeBSD.org
    with "unsubscribe freebsd-security" in the body of the message