From: Jörgen Sigvardsson <jorgen.sigvardsson@kau.se>
Subject: Re: soft mode
Date: Tue, 27 Feb 2001 16:20:43 +0100
Next Article (by Date): Run time problem: 00:05 device unknown Alessandro Iob
Previous Article (by Date): Re: soft mode Peter Busser
Top of Thread: Re: soft mode Peter Busser
Articles sorted by: [Date]
[Author]
[Subject]
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Tuesday 27 February 2001 15:54, Peter Busser wrote: > Hi! > > > The security officer should however not do this on a live system. If > > there is a need for it anyway, then the system should probably be brought > > to single user mode (to be on the really safe side; remove all networking > > cables, all serial cables, usb cables - power, monitor, keyboard ough to > > be enough. And oh yeah, lock the door as well ;-). > > This ``should not'' is exactly why I don't like this thing to be present in > a production system. The secoff account can be hacked too... I agree that a production system is not the place to do experiments. Therefore I propose a compile time option which either: a) does not include the "soft mode" feature - the functionality is not there - - suitable for production systems b) allows the "soft mode" feature - the functionality is there and is defaulted to "off" on boot up - -- Jörgen Sigvardsson, B. Sc. Lecturer, Computer Science Dept. Karlstad University Tel: +46-(0)54-700 1786 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.3 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE6m8XLJtcD8rikkmwRAhz/AKCU/VZpK5/Ztu9KMQj8ieGa3G0V+QCfW3Rq tWTk+9nMp9+sXWi7WYmBnZM= =KvBP -----END PGP SIGNATURE----- - To unsubscribe from the rsbac list, send a mail to majordomo@rsbac.org with unsubscribe rsbac as single line in the body.
Next Article (by Date): Run time problem: 00:05 device unknown Alessandro Iob
Previous Article (by Date): Re: soft mode Peter Busser
Top of Thread: Re: soft mode Peter Busser
Articles sorted by: [Date]
[Author]
[Subject]