--pgp-sign-Multipart_Sun_Nov_12_19:32:56_2006-1
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

At Sat, 21 Oct 2006 10:31:48 -0400,
Thor Lancelot Simon wrote:
>=20
> Try this:
>=20
> console	"/usr/libexec/getty Pc"		vt100	off
> ttyE0	"/usr/libexec/getty Pc"		vt220	on	secure
> tty00	"/usr/libexec/getty std.9600"	unknown	on	secure
>=20
> You will get a getty on both tty00 and ttyE0, so if the bootblock
> configuration gets screwed up you will still be able to log in on
> the serial port, but since /dev/console is not marked "secure", you
> will need to enter the root password to get a single-user shell.

Well since tty00 isn't necessarily the booted serial console either, I
thought that's what the more properly designed constty(4) was for:

constty "/usr/libexec/getty default"    unknown on secure local softcar

It even keeps the same port speed assigned from the boot blocks, though
if you're lucky enough to have a BIOS that does some semblance of serial
console support its speed settings are not always preserved.

Too bad there's no documentation for it yet (sorry, I haven't had time
to write any either, and besides I just started using it with netbsd-3).

Even worse is the fact the attempt to get this right with the default
settings in the standard ttys(5) files was reverted and then it's been
ignored ever since.

--=20
						Greg A. Woods

H:+1 416 218-0098 W:+1 416 489-5852 x122 VE3TCP RoboHack <woods@robohack.ca>
Planix, Inc. <woods@planix.com>       Secrets of the Weird <woods@weird.com>

--pgp-sign-Multipart_Sun_Nov_12_19:32:56_2006-1
Content-Type: application/pgp-signature
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
MessageID: Pd/O93/xG+iumupYrVctwOmrwsVuvtST

iQA/AwUBRVe9SWZ9cbd4v/R/EQIMJwCgwkosDZ0bt8R+U+QdPldWSJqAyPcAn2F4
jGObLvIz3MP3lRNXq/htbZgc
=amGb
-----END PGP SIGNATURE-----

--pgp-sign-Multipart_Sun_Nov_12_19:32:56_2006-1--