Command Security

With security-mode set to command, the system comes up in the Restricted Monitor. In this monitor mode,

• A password is not required if you type the b command, unless you use the command with a parameter.

• The c command never asks for a password.

• A password is required to execute the n command.

Examples are shown in the following screen.

> b
				(no password required)
> c				(no password required)
> b filename
 				(password required)
PROM Password:				(password is not echoed as it is typed)
> n				(password required)
PROM Password:				(password is not echoed as it is typed) 

To set the security password and command security mode, type the following at the ok prompt:

ok password 
ok New password (only first 8 chars are used):
ok Retype new password:
ok setenv security-mode command 
ok

Although this example works, you should normally set the two security parameters with the eeprom command from the operating system.

The security password you assign follows the same rules as the root password: a combination of six to eight letters and numbers. The security password can be the same as the root password, or different from it. You do not have to reset the system; the security feature takes effect as soon as you type the command.

It is important to remember your security password. If you forget this password, you cannot use your system; you will have to call Sun's customer support service to make your machine bootable again.

If you enter an incorrect security password, there will be a delay of about 10 seconds before the next boot prompt appears. The number of times that an incorrect security password is typed is stored in the security-#badlogins parameter. This parameter is a 32-bit signed number (680 years worth of attempts at 10 seconds per attempt).