How
do I lock or disable unused ports such as keyboard, video and USB ports? Here
is the scenario; I have several firewalls built upon Fedora that are in closets
physically unmonitored. An unscrupulous
individual could plug in a keyboard, mouse and monitor into one of these
systems and start getting access to it.
Even worse the individual could plug in other devices to log all packets
flowing through the firewall. This
gives me chills just thinking about it! I
would like to disable any I/O devices that aren't actually needed. (Also
I would like to insure that the system only boots from the configured hard
drive that the system was originally load with.
But this might turn into another thread.) So
how can I protect a system from a local attack such as above? Thanks Rick |