On Mon, 2014-04-07 at 10:39 -0700, Russ Allbery wrote: > John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de> writes: > > > We use FAI for that. 99% of our servers don't even have a CD drive > > anymore, just some of the older ones. And even if you want to install > > from CD, most modern servers provide a BMC with keyboard, mouse and > > video redirect over the network which also allows you to mount ISO > > files as virtual CDs. > > Ah, BMC. Now every computer comes with an extra full-fledged computer! > The main computer is for your use, and the other computer is for the use > of the attacker. That ship sailed long ago. :-/ Some BMCs (like recent iDRAC) run Linux which means there may be some opportunity for an outside project to modify and improve their security. Ben. -- Ben Hutchings Sturgeon's Law: Ninety percent of everything is crap.
Attachment:
signature.asc
Description: This is a digitally signed message part