[MacTUG] Preventing unauthorized OSX "Recovery"

[Matthew Oliver]

Hi Keith,

You can enable the open firmware password protection by booting the computer either from an installation media (older os) or from the recover partition (newer os).
I've been using this in our lab environment from sometime as it prevents a user from booting from a USB operating system as well, or from accessing single user mode etc.

Just don't forget the password ;-P that becomes a real problem.


On 2013-01-28, at 4:06 PM, Keith Peck <kdpeck at uwaterloo.ca<mailto:kdpeck at uwaterloo.ca>>
 wrote:

Hi,
Is there a way to prevent a user from sitting down and accessing the Recovery Options if they were to boot a machine running OSX 10.8 or 10.7?

Say someone holds down the 'ALT' key at system boot and decides to select the Recovery Option, then uses the Disk Utility to wipe the hard drive, or a re-install to give themselves admin access to the machine.

I’m hoping for something like a requirement to enter a password before anything under the ‘Recovery’ selection can be used when the ‘ALT’ key is held at boot.

Keith Peck
Client Services, Information Systems and Technology
University of Waterloo, Waterloo, Ontario, Canada, N2L 3G1.
MC 2020, (519) 888-4567 x.37770
kdpeck at uwaterloo.ca<mailto:kdpeck at uwaterloo.ca>

_______________________________________________
MacTUG mailing list
MacTUG at lists.uwaterloo.ca<mailto:MacTUG at lists.uwaterloo.ca>
https://lists.uwaterloo.ca/mailman/listinfo/mactug

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.uwaterloo.ca/pipermail/mactug/attachments/20130128/fe4f2b9c/attachment.html>