[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: building public system -how to disable ctr-alt-backspace etc



On Tue, May 06, 2003 at 01:36:10PM +0100, Matthew King wrote:
> On Tue, May 06, 2003 at 01:08:04PM +0100, The voices made Grzesiek Sedek say:
> > How can I disable virtual terminals (Alt-ctr-Fxx) reset (ctr-alt-del)
> 
> These two are easy - delete the appropriate lines in /etc/inittab and
> reload init (init q)
> 
> Be careful not to delete all the terminals (leave vc/1). You'll regret
> it otherwise.

Then Ctrl-Alt-F1 will give user a console. That was the OP wanted to
avoid. Rather then deleting the lines, edit them so that the VT not
will be spawned in runlevel 2. That way you could reboot and add the
number 3 as the last argument to lilo and you will have virtual
terminals at your disposal.

Securing a box from users with local access is hard. With unsupervised
access no box is secure (unless it has a good lock and cannot be
removed), supervised access is of course better, but still
problematic. Use a password in BIOS and don't allow booting from
floppies.

If the box is attached to a network, consider disabling root login
from console, make su executable for root only, deinstall sudo, turn
on root logins from ssh and disable keyboard-interaktive login. That
way, the only (?) way to get a root prompt is to authenticate with the
proper ssh key. Don't lose your private key...

-- 
Note that I use Debian version 3.0
Linux emac140 2.4.19 #1 fre jan 3 12:08:19 CET 2003 i686 unknown

Hans Ekbrand

Attachment: pgpQyekx5Qi3f.pgp
Description: PGP signature


Reply to: