From mboxrd@z Thu Jan 1 00:00:00 1970 From: baux80@gmail.com (baux80 at gmail.com) Date: Wed, 1 Sep 2010 11:56:03 +0200 Subject: [9fans] how to lock cpu console In-Reply-To: <4cefc0a5c0d62eb41b916816776836e1@brasstown.quanstro.net> References: <4cefc0a5c0d62eb41b916816776836e1@brasstown.quanstro.net> Message-ID: Topicbox-Message-UUID: 4c8ba4e0-ead6-11e9-9d60-3106f5b1d025 On 31 August 2010 at 11:04, erik quanstrom wrote: > i didn't suggest lock for cpu servers since it requires > rio. seems silly to run rio on the console just to lock it. > and unfortunately, i think this method would also interfere > with the serial console. and it wouldn't be immune to > a three-fingered salute, ^P, ^T^Tr, and other hilarity. yeah :-) as replied to John Floren, was only a teoric question (an I suspected the answer). For some unix server too we let the colsole logged. In hard crash condition also the login processo don't work, and having a console logged in is useful and doesn't take security away > since there are no interrupts on the console, it would seem > trivial to me to, ahem, lock down the console with a 10 line program. > you'd be left with defending against ^T^Tr, ^P, etc. > but then again, the power button or network cable is sooo > convienent. heck, just take the machine home. :-P. who care user/pass when you can pull of hard drives :-) thanks :-) bye