How to protect an OS X Server from an unauthorized physical connection?

Posted by GJ on Server Fault See other posts from Server Fault or by GJ
Published on 2010-04-04T16:02:58Z Indexed on 2010/04/04 16:23 UTC
Read the original article Hit count: 312

Filed under:

macosx

|

vnc

|

security

Hi

I have an OS X 10.6 server, which I administer via SSH and VNC (via SSH tunnel).

I can't leave it at the login window since then VNC connections are refused. Therefore I currently leave it logged with my user account.

Since it doesn't have a monitor attached, it doesn't go into screen saver mode, which means it doesn't require a password to retake control. This means it is very easy for anyone connecting a keyboard/mouse and monitor to take control of the system.

The screen saver password protection, which I can't get to activate, unlike the system's login window, is perfectly compatible with VNC connections.

How could I prevent such direct access to the server without connecting a monitor and without blocking my ability to connect with VNC?

Thanks!

© Server Fault or respective owner

Related posts about macosx

4GB of RAM in MacOSX 10.5, only 3GB in MacOSX 10.6

as seen on Super User - Search for 'Super User'
Hi, I was using MacOSX 10.5 on my MacBook until today and I had 4GB of memory there. Now I have updated to MacOSX 10.6 and it only displays 3GB. Why is that? How can I fix it? Also, I am a bit wondering why most people (well, most of the Google hits explained the 3GB issue that way -- leaving… >>> More
Upgrading PHP on MacOSX without config_vars.mk ?

as seen on Server Fault - Search for 'Server Fault'
Hi everyone, I want to upgrade my php version running on MAMP to 5.3. I've copied the ./configure statement from phpinfo() and downloaded the 5.3 branch source i wish to compile. However, when i try to compile it i get an error about a missing config_vars.mk file from apxs. How can i solve this… >>> More
Compiling Asterisk 1.6.2 on MacOSX Server

as seen on Stack Overflow - Search for 'Stack Overflow'
I get this error while trying to compile Asterisk 1.6.2 on Snow Leopard Server : ld: symbol dyld_stub_binding_helper not defined (usually in crt1.o/dylib1.o/bundle1.o) Googling this I’ve found nothing enlightening so far. This is what I am trying: ./configure --without-h323 --without-zaptel… >>> More
Python unicode Decode Error SUDs

as seen on Stack Overflow - Search for 'Stack Overflow'
OK so I have # -*- coding: utf-8 -*- at the top of my script and it worked for being able to pull data from the database that had funny chars(Ñ ,Õ,é,—,–,’,…) in it and store that data into variables...but I have run into other problems, see I pull my data, organize it, and then dump it into a variables… >>> More
Why do I get "unsupported architecture" errors trying to install a Python library in OSX?

as seen on Super User - Search for 'Super User'
I am trying to install a Python library in the Presto package, source http://www.cv.nrao.edu/~sransom/presto/ Using 'gmake fftfit' I get the following error: cd fftfit_src ; f2py-2.7 -c fftfit.pyf *.f running build running config_cc unifing config_cc, config, build_clib, build_ext, build commands… >>> More

Related posts about vnc

Garbled UI with vnc, chicken-of-the-vnc, gridengine, qmon

as seen on Ask Ubuntu - Search for 'Ask Ubuntu'
Ubuntu 11.04 gridengine version 6.2u5-1ubuntu1 I start a desktop with the vncserver command. My ~/.vnc/xstartup ends with 'gnome-session'. I connect to it using chicken-of-the-VNC on my MacOSX Lion system. I run 'qmon'. Much of qmon works, but several critical tasks show hopelessly garbled grid… >>> More
Real VNC won't connect to OS X Leopard VNC server

as seen on Super User - Search for 'Super User'
I have 3 machines. 2 Macs, 1 Dell. 1 of the Macs is running as a VNC server and the other Mac connects great with Chicken of the VNC. Sadly, this app does not exist for Windows so I'm using RealVNC to view from Windows. I connect the exact same way as with the Mac, but on Windows when it connects… >>> More
Ubuntu Server running VNC

as seen on Server Fault - Search for 'Server Fault'
I have access to four computers: 1 Ubuntu Server desktop (Version 10.04) 1 Mac Mini (Snow Leopard) 1 Windows desktop (Windows 7) 1 Windows laptop (Windows Vista) The first three will always be on the home network. My goal is to SSH from the laptop into the server and be able, through VNC (or another… >>> More
How to prevent question mark cursor issue cause be Insert key when doing VNC to a mac?

as seen on Super User - Search for 'Super User'
I found out that when I press the Insert key on the client I will block the OS X VNC server by putting it in a "help mode" where you get the question mark mouse cursor. The mouse works but I cannot use the keyboard anymore. Details: Reconnecting using VNC does not help Normal keyboard is working… >>> More
Set Up a VNC Linux Server in 5 Easy Steps

as seen on Internet.com - Search for 'Internet.com'
Tip of the Trade: VNC makes it easy to log into a full desktop on a remote server. Follow these steps, and your Debian Linux server will be up and running in no time. >>> More