Re: funny customers

From: Per Engelbrecht (per_at_xterm.dk)
Date: 09/22/04

  • Next message: Per Engelbrecht: "Re: funny customers" 
    Date: Wed, 22 Sep 2004 16:34:41 +0200 (CEST)
To: <freebsd-isp@freebsd.org>

    Hi Steve

    >>
    >> I'm administering a mid-size serverhosting site and have a problem
    >> with customers enabling root passwd in single-user mode.
    >> It's the same customers that set up fake payment sites, do serious
    >> hacking (i.e. not good, productive hacking) mailspamming and so
    >> on.
    >>
    >> In order to collect information for a criminal case (yes, in some
    >> cases we go all the way) I need a way to get into these boxes
    >> (mostly
    >> FreeBSD's) but I can't think of a way to disable the prompt for
    >> root passwd in single-user mode.
    >> Know it's a wildcard, but I've been looking at 'set' options under
    >> 'boot' and a way to mount the serverdisk on another fbsd
    >> installation, but without any luck.
    >>
    >> Any help would be appreciatet. Thank you.
    >>

    >
    > Can you not remove the disk and mount it in an alternate box to get
    > access to the data you need?

    Keeping in mind that alle the data from / down are important, the
    standard procedure adding_a_disk won't work due to the dd part.
    A simple mount (finding disk from dmesg) didn't work eighter ..
    Both running system and disk use UFS2.

    Maybe I'm overlooking the obvious, but what besides the above would do
    the trick ?

    respectfully
    /per
    per@xterm.dk

    >
    > --
    > Steve Lalonde RTFM
    > Chief Technical Officer
    > Entanet International Ltd
    > http://www.enta.net/
    > _______________________________________________
    > freebsd-isp@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    > To unsubscribe, send any mail to
    > "freebsd-isp-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

  • Next message: Per Engelbrecht: "Re: funny customers"

    Relevant Pages

    • Re: Howto mount a Debian disk (LVM, dm-crypt)?
      ... Once the decrypted device is set up, ... and <mountpt> is the mount point ... When I connect my disk, I get the following new devices: ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • RE: Disk Full issue: SOLVED
      ... was written to the partition since a mount point was down... ... > because the disk is full. ... To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". ...
      (Debian-User)
    • Re: Restoring Data from a DD image
      ... >> I've just replaced a hard disk that was dying fast. ... Can someone help me understand how do I mount that image ... vnconfig is for 4.x, ... To unsubscribe, ...
      (freebsd-questions)
    • Re: Howto mount a Debian disk (LVM, dm-crypt)?
      ... I installed an etch system the usual d-i way (using the complete disk, ... one partition, LVM, dm-crypted), but now I have to mount this disk on ... passphrase prompt. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • SUMMARY: Creating bare-metal recovery disks
      ... Copy system disk ... To create an ADVFS root and /usr partition, ... Next you are going to need to make the following mount points: ... mkdir /rootclone ...
      (Tru64-UNIX-Managers)