Once upon a time, Bron Gondwana <brong@fastmail.fm> said:
quoted text
> To be fair here, this could also be accomplished by having to flip a
> physical switch on the router, especially if you did something funky
> like:
> 
> [---] push this button for a 5 minute access pass to upload new
>       software through physical cable port 1.
> 
> More complex, but not unreasonable.

Well, there is no restriction on putting files on the routing engine's
storage devices (flash and hard drive); it is running OpenSSH, so
scp/sftp work fine, and you can drop to a shell easily.  The restriction
is that the kernel won't run unsigned binaries.

Also, flipping physical switches is pretty much an unreasonable
expectation for core router operation.  These are often in other
locations, sometimes other telcos' central offices (where you have to
pay to have "remote hands" do something and then hope they don't screw
it up).  You can easily go the entire life of a device where the primary
operators never physically see the device.

-- 
Chris Adams <cmadams@hiwaay.net>
Systems and Network Administrator - HiWAAY Internet Services
I don't speak for anybody but myself - that's enough trouble.
-
unsubscribe notice
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/