[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Disable/Passprotect single user mode
- To: misc_(_at_)_openbsd_(_dot_)_org
- Subject: Re: Disable/Passprotect single user mode
- From: Frank Bax <fbax_(_at_)_sympatico_(_dot_)_ca>
- Date: Sat, 27 Aug 2005 08:57:33 -0400
At 08:27 AM 8/27/05, Dave Feustel wrote:
On Saturday 27 August 2005 06:07, JSD wrote:
> Hi folks,
> I have a big root access problem. If someone has physical
> access to my OpenBSD box, than he/she can swith into single
> user mode (-s) and can change the password of root. It is a
> big problem for me and I would like to password protect this
> single user mode or to totally disable this function but I
> don't know how.
> Is anyone here who solved this problem? Please help, thanks!
> Jaya Sri
In your bios, you should be able to set a boot password which will prevent
booting until the password is given.
In addition, if you have a laptop, you should be able to also set a disk
which will also prevent booting until it is given.
Finally, you should be able in the bios to disable booting
from any device but the hard disk containing the operating system.
Did you miss the line "If someone has physical access to my OpenBSD
box"? With physical access, all of your suggestions are easily bypassed
with a bios reset.