- Community Home
- >
- Servers and Operating Systems
- >
- Legacy
- >
- Operating System - Tru64 Unix
- >
- password protect console
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-31-2006 09:19 PM
тАО07-31-2006 09:19 PM
password protect console
Is it possible to set a password for console mode in tru64 unix? Kind of like password protecting the boot prompt in Lnux.
Thnaks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-31-2006 09:41 PM
тАО07-31-2006 09:41 PM
Re: password protect console
SRM console firmware involved. Have you
tried ">>>set password"? Or by "in tru64
unix" did you mean that you wanted to set the
console password while the system was up and
running?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-31-2006 10:59 PM
тАО07-31-2006 10:59 PM
Re: password protect console
I am not familiar with tru64 at all but in Linux, it is possible to interupt the boot process and gain shell access as root. If you set boot loader password, this is no longer possible.
Now I understand that tru64 doesn't use a bootloader but apparently you can boot to console mode by doing and log in without a root password. I need to secure this.
As for single user mode, I am adding this line to /etc/inittab
~~:S:wait:/sbin/sulogin
SO in a nutshell, I want to secure all forms of root access to the box with a password.
Thanks
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-31-2006 11:55 PM
тАО07-31-2006 11:55 PM
Re: password protect console
It would be something like :
>>> boot -flag 0
Like Steven said, you can prevent that by setting console password (>>> set password). This would be something like BIOS password in PC world.
By the way, line
~~:S:wait:/sbin/sulogin
in inittab is nothing without setting BIOS password. You can boot from knoppix CD i change that. You can even change root password from knoppix CD.
So, on linux intel platform you MUST also prevent booting from CD and changing boot device.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-31-2006 11:59 PM
тАО07-31-2006 11:59 PM
Re: password protect console
I will use the >>> set password
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-01-2006 02:48 AM
тАО08-01-2006 02:48 AM
Re: password protect console
person with physical access to the machine
(in particular, to the Halt button) may be
able to bypass a console password
requirement. A locked room is pretty much a
requirement for serious security.
Depending on the (still secret) hardware
and/or firmware, you may also have a "set
secure" console command which might improve
things a bit, too.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-01-2006 04:44 AM
тАО08-01-2006 04:44 AM
Re: password protect console
How you password protect the console itself and how secure that password is depends on the console firmware. In most cases using "set password" at the ">>>" is the proper command. But as others have implied, if someone has access to the hardware they can probably manage to break into the system if they try hard enough, regardless of whether you've set the console password or not. The best way to secure the console is to secure physical access to the hardware.
Ann Majeske - Tru64 UNIX Security
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-01-2006 12:25 PM
тАО08-01-2006 12:25 PM
Re: password protect console
You can use ">>>set password" console command. and ">>> login" to login.
Archunan
Archie
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО08-01-2006 09:06 PM
тАО08-01-2006 09:06 PM
Re: password protect console
Thanks for all the replies. OK to clarify. Physical access to the machines are tightly controlled. It is a large cellular service company and access to the datacentre is restricted.
Version is 5.1b with latest patchkit.
We are implementing a Unix security standard and one of the benchmarks is to password protect all root access to the servers - majority of which are Linux, but a few legacy tru64 machines also became my responsibillity.
The replies to my post here has solved the issue for me so thanks again guys.