[sclug] Disable 'Ctrl-Alt-Del' reboots

[Simon Huggins]

On Tue, Feb 01, 2005 at 11:23:34PM +0000, Alex Butcher wrote:
> On Tue, 1 Feb 2005, Neil Owens wrote:
> >>Alex Wrote:
> >I'm just wondering why a 'server' based system, - IPCop falls into this
> >category -  doesn't have it disabled by default when no-one's logged in.
> I'll admit it does seem a little incongruous with RH's decision to compile
> in magic SysRq, but disable it during boot. OTOH, C-A-D is pretty safe (the
> worst possible outcome is a DoS until someone notices, and only then if
> you've passworded GRUB or similar).

Er, you need physical access to hit CTRL-ALT-DEL.

Surely it's not a DoS if you can just pull the power cable out to cause
the same problem...

The game is up if you have physical access because you can:
	- boot off some other media (USB key, CD, floppy, network etc
	  depending how locked down your BIOS is)
	- get to the bootloader (if it's not passworded)
	- remove the disk and read it all/write other stuff to it
	- pour a cup of water into the machine...

Simon.

-- 
* "And what have they ever given us in return?"   "The aqueduct?"   *
|                                                                   |
*                                                                   *
           Brought to you by the letter C and the number 15