On Sun, 2005-03-13 at 05:46, Rick Meyer wrote: > How do I lock or disable unused ports such as keyboard, video and USB > ports? > > > > Here is the scenario; I have several firewalls built upon Fedora that > are in closets physically unmonitored. An unscrupulous individual > could plug in a keyboard, mouse and monitor into one of these systems > and start getting access to it. Even worse the individual could plug > in other devices to log all packets flowing through the firewall. > This gives me chills just thinking about it! > 90% of computer security is physical security of the equipment. Without that not only can someone attempt direct access to the system the can in most cases just walk away with the whole system and dissect it at their leisure. Some systems have bios options for detecting case being opened, and bios level passwords. That makes it more difficult but there are normally work arounds if such things are lost. As to accessing ports on the system about the best option you have is to take some epoxy and fill the port openings so no one can plug anything in. That is about the lowest cost solution. The next level up is to get some custom made boxes made that go around the entire system with pad locks. Just make sure there is enough ventilation to keep the system cool. With this you can also anchor the box to the wall or floor. -- Scot L. Harris webid@xxxxxxxxxx backups: always in season, never out of style.
