Lock down Primary Screen?

[kjemison]

Hello,

I wanted to know if there is a way to password protect the options screen if someone was to attach a monitor & keyboard directly to the FreeNAS server?

Thank you
Kell

 

[Bidule0hm]

Well, if someone has physical access to the server any password will be useless...

That been said, IIRC, you can hide the console menu. See the manual ;)

 

[kjemison]

Hmm... Just curious.. if the console screen was capable of being password protected ... never mind... dont want to argue over this..

I will look and see how to hide the console menu... just seems to me that if a person was at the console menu and chose an option then there would be a security feature that would then next ask for a password to "unlock" the option for editing... just saying.

Thank you for your input.. it is appreciated as always!

Sincerely,
Kell

 

[Bidule0hm]

Not AFAIK.

The option to disable the console menu is in System --> Advanced and it's the first checkbox : http://doc.freenas.org/9.3/freenas_system.html#advanced ;)

 

[fracai]

If someone has access to the server, they're not going to bother trying to break a password. They'll just replace the boot volume with a fresh install that doesn't have a password.

 

[titan_rw]

Hmm... Just curious.. if the console screen was capable of being password protected ... never mind... dont want to argue over this..

I will look and see how to hide the console menu... just seems to me that if a person was at the console menu and chose an option then there would be a security feature that would then next ask for a password to "unlock" the option for editing... just saying.

Thank you for your input.. it is appreciated as always!

Sincerely,
Kell

As mentioned, not directly.

However, if you disable the console menu as stated, you can then login as root, and launch the console menu. Accomplishes the same thing, albeit in a different way.

After logging in as root, use "python /etc/netcli", or simply launch "/etc/netcli" directly, as it seems to have the 'sheebang' magic to launch python itself. However, once launched, I'm not sure the best way to kill it. Maybe launching it this was is not the correct way of doing it.

 

[fracai]

Maybe you can launch a shell from the console and then kill the netcli process?
Presumably that would kill the shell as well and kick you back to the shell that you launched the netcli from. You could then logout and be back at a password prompt.