Local users get to play root?

Jesse Keating jkeating at redhat.com
Wed Nov 18 20:30:54 UTC 2009


On Wed, 2009-11-18 at 21:28 +0100, nodata wrote:
> Am 2009-11-18 20:50, schrieb Jesse Keating:
> > On Wed, 2009-11-18 at 20:34 +0100, nodata wrote:
> >> If the servers are in locked racks and you require a reboot to get
> >> access to a grub prompt which is not password protected, then the outage
> >> would trip the monitoring system.
> >>
> >
> > The server is in a locked rack, but the console access to the server
> > isn't?  How far down the strawman path are where?
> 
> huh? All servers are in locked racks, with a few KVM terminals.
> 

The places I've cared about security of the systems wouldn't allow
anybody without a key to our rack to access the console.  You'd have to
unlock the rack in order to access the KVM or to plug anything into the
machines.

-- 
Jesse Keating
Fedora -- Freedom² is a feature!
identi.ca: http://identi.ca/jkeating
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-devel-list/attachments/20091118/2e390855/attachment.sig>


More information about the fedora-devel-list mailing list