[sclug] Disable 'Ctrl-Alt-Del' reboots
Alex Butcher
lug at assursys.co.uk
Wed Feb 2 09:17:40 UTC 2005
On Tue, 1 Feb 2005, Simon Huggins wrote:
> On Tue, Feb 01, 2005 at 11:23:34PM +0000, Alex Butcher wrote:
>> On Tue, 1 Feb 2005, Neil Owens wrote:
>>>> Alex Wrote:
>>> I'm just wondering why a 'server' based system, - IPCop falls into this
>>> category - doesn't have it disabled by default when no-one's logged in.
>> I'll admit it does seem a little incongruous with RH's decision to compile
>> in magic SysRq, but disable it during boot. OTOH, C-A-D is pretty safe (the
>> worst possible outcome is a DoS until someone notices, and only then if
>> you've passworded GRUB or similar).
>
> Er, you need physical access to hit CTRL-ALT-DEL.
>
> Surely it's not a DoS if you can just pull the power cable out to cause
> the same problem...
I was not pointing out that DoS by C-A-D was a serious threat, just that it
seems incongruous to have C-A-D enabled, but Magic SysRq disabled. I guess
the differentiator is that Magic SysRq can cause filesystem damage (e.g.
SysRq+O or SysRq+B without a SysRq+U first) whereas C-A-D shouldn't.
> Simon.
Best Regards,
Alex.
--
Alex Butcher Brainbench MVP for Internet Security: www.brainbench.com
Bristol, UK Need reliable and secure network systems?
PGP/GnuPG ID:0x271fd950 <http://www.assursys.com/>
More information about the Sclug
mailing list