RE: Preventing Single user mode booting

["Mikael Gunnarsson" <mikael@ports.se>]

Unfortunately, if someone has physical access to the machine, they can
always remove the cover and reset the BIOS..

You could always lock the machine up, or weld the case shut, tho.. :)

Mikael

> -----Original Message-----
> From: owner-misc@openbsd.org [mailto:owner-misc@openbsd.org]On Behalf Of
> Michael McCaffrey
> Sent: Friday, April 20, 2001 6:53 AM
> To: marshray@mindspring.com
> Cc: misc@openbsd.org
> Subject: Re: Preventing Single user mode booting
>
>
> 1. change your bios to boot from the HD first.
> 2. set a bios admin password.
> 3. remove "secure" from the console line in /etc/ttys. this make's it so a
>    password is required even for single user.
>
> console "/usr/libexec/getty Pc"         vt220   off secure
>
>   to
>
> console "/usr/libexec/getty Pc"         vt220   off
>
> i've never done this but i believe this will work.
>
> at work we have systems with sensors that detect if the case was
> opened. when it boots the next time the bios tells you it was opened.
>
> --
> mike
>
>