Just a question. Can I use my rescue system to boot any SuSE linux system or just the ones that were installed from that disk? If yes, this would be a serious security gap, because my linux server can't be placed in a secure location. It's in the normal offices... Being able to boot it with another rescue system would be a serious leak... Kind regards Guy ______________________________________________________ Get Your FREE FlashMail Address now at http://www.flashmail.com It's Free, Easy, & Fun !!! -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Guy Van Sanden wrote:
Just a question.
Can I use my rescue system to boot any SuSE linux system or just the ones that were installed from that disk?
If yes, this would be a serious security gap, because my linux server can't be placed in a secure location. It's in the normal offices... Being able to boot it with another rescue system would be a serious leak...
I don't know about "any" system, but I have booted recent versions such as 5.3 and 6 with my 6.4 rescue set. You seem to be missing the point with security, it isn't the boot floppies which are the risk, it is having your floppy drive enabled and bootable. Try a floppy lock. Turn off driveA in bios, and set to boot from C only. Better yet, pull your floppy out of the remote server. Also, if someone can get to your machine and do a floppy boot, what about a cdrom boot? Disable that too. What about a network boot? Also, if they can get to your machine with a boot disk, what is to stop them from pulling the cover off while you are not there, and doing a complete harddrive copy? Remote servers "ARE NOT" secure. -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Well, a machine is only as secure the person administrating it. If it can not be moved to a secure place then I would disable the floppy and the CDROM for starters. I would also put a password in the bios so that if the machine is rebooted no one can access it. I would also get a lock for the case so no one just walks up and pops the case open to make a copy of the hard drive. The rescue disk is only a security risk if you let it become this. * Guy Van Sanden (sienix@flashmail.com) [000904 13:49]: -->Just a question. --> -->Can I use my rescue system to boot any SuSE linux system or just -->the ones that were installed from that disk? --> -->If yes, this would be a serious security gap, because my linux -->server can't be placed in a secure location. It's in the normal -->offices... Being able to boot it with another rescue system -->would be a serious leak... --> -- Cheers, Ben Rosenberg mailto:ben@whack.org ------------------------- "The only 'intuitive' interface is the nipple. After that, it's all learned." -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
participants (3)
-
ben＠whack.org -
sienix＠flashmail.com -
zentara＠gypsyfarm.com