Path: utzoo!utgpu!news-server.csri.toronto.edu!cs.utexas.edu!uwm.edu!ogicse!plains!csmith
From: csmith@plains.NoDak.edu (Carl D. Smith)
Newsgroups: comp.sys.novell
Subject: Re: Auto backups to tape
Message-ID: <7029@plains.NoDak.edu>
Date: 7 Dec 90 01:51:31 GMT
References: <826@macuni.mqcc.mq.oz> <368@intuit.intuit.COM>
Organization: North Dakota State University, Fargo
Lines: 42

In article <368@intuit.intuit.COM> ddg@intuit.intuit.COM (David DelGreco) writes:
>dbielik@sunb.mqcc.mq.oz.au (Danny Bielik) writes:
>
>>I am running Novell ELS II V2.12 in Non-dedicated mode, and I have it set up so that there is an account whose sole purpose is to wait for 1am and then do a 
>>full backup to tape.
>
>>Now, I have this problem, where, whilst it is waiting for a backup, someone
>>can come along and CTRL-C and break into an account with full supervisor
>>priveleges.  Now I need a way to disable CTRL-C and CTRL_BREAK in order to
>>stop anyone from doing this.

>Why not just disconnect the keyboard?  If it's sole purpose is to wait
>for a certain time at which point to backup, then no one should be using
>it anyway, should they?

If you just unplug the keyboard, someone could plug in a keyboard from
another machine, and use the account with supervisor privilages.   If you
have a computer with a keyboard lock, you can lock the keyboard, but that
is not very secure, since the key locks are not very strong, and could be
turned with almost anything like a screwdriver, etc.   Also, there aren't
very many different kinds of keys used for keyboard locks, so it's very
likely that someone else has an identical key.

One solution might be to find a TSR that disables control break and control
alt delete key combinations.

I don't know of any method that would make the computer completely safe,
other than locking it in a room that nobody can get into.

But, if nobody is using the computer, it doesn't matter if some RAM is
used for one of these TSR auto backup routines that logs itself in to the
network at the time of the backup.   Then the machine is not logged in as
a supervisor until the time of the backup.  But someone could stop the backup
and exit the program, and still get access to the supervisor account.

The only sufficient solution that I can think of is to lock the computer in a
room that only supervisors have keys to.

    Carl Smith
    .signature?

A