Re: soft mode


From: Jörgen Sigvardsson <jorgen.sigvardsson@kau.se>
Subject: Re: soft mode
Date: Tue, 27 Feb 2001 16:20:43 +0100

Next Article (by Author): Design question... Jörgen Sigvardsson
Previous Article (by Author): Re: soft mode and v1.1.1-pre4 problem (was: Re: rsbac-v1.1.1-pre4 uploaded) Jörgen Sigvardsson
Top of Thread: Re: soft mode Peter Busser
Articles sorted by: [Date] [Author] [Subject]


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Tuesday 27 February 2001 15:54, Peter Busser wrote:
> Hi!
>
> > The security officer should however not do this on a live system. If
> > there is a need for it anyway, then the system should probably be brought
> > to single user mode (to be on the really safe side; remove all networking
> > cables, all serial cables, usb cables - power, monitor, keyboard ough to
> > be enough. And oh yeah, lock the door as well ;-).
>
> This ``should not'' is exactly why I don't like this thing to be present in
> a production system. The secoff account can be hacked too...

I agree that a production system is not the place to do experiments. 

Therefore I propose a compile time option which either:
a) does not include the "soft mode" feature - the functionality is not there 
- - suitable for production systems
b) allows the "soft mode" feature - the functionality is there and is 
defaulted to "off" on boot up

- -- 
Jörgen Sigvardsson, B. Sc.
Lecturer, Computer Science Dept. Karlstad University
Tel: +46-(0)54-700 1786
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.3 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE6m8XLJtcD8rikkmwRAhz/AKCU/VZpK5/Ztu9KMQj8ieGa3G0V+QCfW3Rq
tWTk+9nMp9+sXWi7WYmBnZM=
=KvBP
-----END PGP SIGNATURE-----
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Author): Design question... Jörgen Sigvardsson
Previous Article (by Author): Re: soft mode and v1.1.1-pre4 problem (was: Re: rsbac-v1.1.1-pre4 uploaded) Jörgen Sigvardsson
Top of Thread: Re: soft mode Peter Busser
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.