Re: Sun M-class hardware denial of service

[Florian Weimer <fw () deneb enyo de>]

* Theo de Raadt:

> > On the other hand, I generally prefer a "trust me, I know what I'm
> > doing" switch on the systems I deal with.  It's really frustrating if a
> > system tries to protect itself from me, and consequently fails to comply
> > with the actual requirements in this situation.
>
> As well, note that a power-off of the system is apparently not
> sufficient (or so I am led to understand).

Yes, obviously, otherwise you could run on hardware which has been
detected as faulty.

If my theory is correct, it would have been possible to avoid the
power-off by replacing the hardware in that domain.  You should be able
to clear the fault information in the affected FRUs off-line (which
probably requires some magic numbers, too), and mount them in a
different enclosure.

> That isn't just the system protecting you from yourself; that's a
> non-clearable fault causing multiple service calls.

Hey, after all, you are tampering business records related to your
support contract. 8-/