Is there way lock FreeNAS screen console?

[Jimm Chen]

After FreeNAS 9.3 boots up, it show up a Console Setup screen, allowing the user to change network interface IP, or even access the whol shell. Anyone beside the FreeNAS physical machine can twiddle with it, which can be dangerous.

So may question is: Is there a way to lock the console so that only a user with admin password can operate on it?

 

[SweetAndLow]

If you have physical access to a machine anything is possible so locking down the console is pointless. If someone wanted they could boot any OS they wanted and mess with everything.

If you want though you can disable the console in the freenas settings under the settings tab.

 

[BigDave]

Anyone beside the FreeNAS physical machine can twiddle with it, which can be dangerous.

If security is a concern for you, don't leave the FreeNAS server hooked up to a monitor, keyboard & mouse.
Most admins/users go through the GUI or IMPI

 

[BigDave]

Sweet if we were gun fighters, you would have gunned me down twice today:(

 

[SweetAndLow]

 

[chris.shelton]

A neat little trick is to use ALT+F1 or ALT+F2 to toggle between the login screen. Although this screen is pointless because you can toggle passed it, it gives the illusion that the console is locked and requires a password.

 

[anodos]

A neat little trick is to use ALT+F1 or ALT+F2 to toggle between the login screen. Although this screen is pointless because you can toggle passed it, it gives the illusion that the console is locked and requires a password.

An even neater trick is putting a lock on the server room door. ;)
Enter shell and type "lock" https://www.freebsd.org/cgi/man.cgi...FreeBSD+10.2-RELEASE&arch=default&format=html

 

[diedrichg]

An even neater trick is putting a lock on the server room door. ;)
Enter shell and type "lock" https://www.freebsd.org/cgi/man.cgi...FreeBSD+10.2-RELEASE&arch=default&format=html

I ignore your lock, I hard shutdown the machine, reboot and have access again.

 

[gheppy]

so for version 11.3 you can still operate the console freely without entering a password ?

 

[anodos]

so for version 11.3 you can still operate the console freely without entering a password ?

7. System — FreeNAS®11.3-U3.1 User Guide Table of Contents

www.ixsystems.com

A lot has changed in 5 years.

 

[danb35]

A lot has changed in 5 years.

Yeah, but I don't think this is one of those things--I'm pretty sure that option was there in 9.3 as well. The manual says it was, anyway:

5. System — FreeNAS User Guide 9.3 Table of Contents

www.ixsystems.com

 

[danb35]

so for version 11.3 you can still operate the console freely without entering a password ?

If you leave the option enabled to show the console menu. Exactly as it was in 9.3 (and even much older versions, IIRC).