Re: funny customers

From: Per Engelbrecht (per_at_xterm.dk)
Date: 09/22/04

  • Next message: Per Engelbrecht: "Re: funny customers" 
    Date: Wed, 22 Sep 2004 16:34:41 +0200 (CEST)
To: <freebsd-isp@freebsd.org>

    Hi Steve

    >>
    >> I'm administering a mid-size serverhosting site and have a problem
    >> with customers enabling root passwd in single-user mode.
    >> It's the same customers that set up fake payment sites, do serious
    >> hacking (i.e. not good, productive hacking) mailspamming and so
    >> on.
    >>
    >> In order to collect information for a criminal case (yes, in some
    >> cases we go all the way) I need a way to get into these boxes
    >> (mostly
    >> FreeBSD's) but I can't think of a way to disable the prompt for
    >> root passwd in single-user mode.
    >> Know it's a wildcard, but I've been looking at 'set' options under
    >> 'boot' and a way to mount the serverdisk on another fbsd
    >> installation, but without any luck.
    >>
    >> Any help would be appreciatet. Thank you.
    >>

    >
    > Can you not remove the disk and mount it in an alternate box to get
    > access to the data you need?

    Keeping in mind that alle the data from / down are important, the
    standard procedure adding_a_disk won't work due to the dd part.
    A simple mount (finding disk from dmesg) didn't work eighter ..
    Both running system and disk use UFS2.

    Maybe I'm overlooking the obvious, but what besides the above would do
    the trick ?

    respectfully
    /per
    per@xterm.dk

    >
    > --
    > Steve Lalonde RTFM
    > Chief Technical Officer
    > Entanet International Ltd
    > http://www.enta.net/
    > _______________________________________________
    > freebsd-isp@freebsd.org mailing list
    > http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    > To unsubscribe, send any mail to
    > "freebsd-isp-unsubscribe@freebsd.org"

    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

  • Next message: Per Engelbrecht: "Re: funny customers"

    Relevant Pages

    • Re: usb2 port gets very slow on 2-gig Flash Drive.
      ... You'd only need to run the commands before "mount" once, ... You make all the filesystem changes to a disk image on your hard disk, ... It actually played on both the MP3 player and ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • Re: Howto mount a Debian disk (LVM, dm-crypt)?
      ... Once the decrypted device is set up, ... and <mountpt> is the mount point ... When I connect my disk, I get the following new devices: ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • Re: where would i configure an external HD to be automounted?
      ... it was doing it via autofs. ... and access the mount point. ... it checks for the disk and mounts it. ... To UNSUBSCRIBE, email to debian-user-REQUEST@xxxxxxxxxxxxxxxx ...
      (Debian-User)
    • RE: Disk Full issue: SOLVED
      ... was written to the partition since a mount point was down... ... > because the disk is full. ... To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org with a subject of "unsubscribe". ...
      (Debian-User)
    • SUMMARY: Creating bare-metal recovery disks
      ... Copy system disk ... To create an ADVFS root and /usr partition, ... Next you are going to need to make the following mount points: ... mkdir /rootclone ...
      (Tru64-UNIX-Managers)