On Sun, 05 Aug 2001, Andor Demarteau <ademarte@students.cs.uu.nl> wrote: > On Sat, 4 Aug 2001, Luke Davis wrote: > > > You can remove the keyboard, but someone can just plug in a new key board. > > The best way, is to password protect the system: don't give anyone the > > password for root, and do not allow any other accounts to log in from the > > console. > Linxu is per default passwd protected, but as said they can still login on > the console. > Now here are is a solution: > Install the vlock package > after bootup login as root and execute > exec vlock -a > > This will lock all consoles and can only be disable by the root-password, > if it crashes the exec part will maake sure that your session will be > logged out after vlock has crashed. While it's a valid alternative, perhaps even the simplest alternative, I'd rather rely on unix's integrated login control. On most linux distributions you can have a pretty thorough control on who can login from what place and at what time, this is usually achieved through tweaking /etc/security/access.conf. (I suggest you tweak, or at least have a look at, all the files in /etc/security/) There you can easily disallow everybody but root from loging in via the console. In fact my suggestion would be: - Disallow everyone but root from loging in at the console (Wise on a LAN setup) - Disallow root from loging in from anywhere except the console. That's a pretty logic scheme I'd say. And now you needn't bother about the keyboard because even someone with a normal account won't be able to log in at the console... Well, unless they know the root password, but then they can do anything they want anyway if they have that piece of information. > > > > On Sat, 4 Aug 2001, John J. Boyer wrote: > > > > > Hello, > > > If I put a Linux box on our network, I won't want it accessed except by > > > telnet and ftp. How can I lock the keyboard after bootup? Can the keyboard > > > be removed once the bootup procedure is completed? The machine will have > > > only a simple video card, and of course the monitor will be brought over > > > only when it is needed. > > > Thanks. > > > John > > > > > > Computers to Help People, Inc. > > > http://www.chpi.org > > > 825 East Johnson; Madison, WI 53703 > > > > > > > > > > > > > > > > > > > > > _______________________________________________ > > > > > > Blinux-list@redhat.com > > > https://listman.redhat.com/mailman/listinfo/blinux-list > > > > > > > > > > > _______________________________________________ > > > > Blinux-list@redhat.com > > https://listman.redhat.com/mailman/listinfo/blinux-list > > > > slainte mhaith (good health), slainte (cheers) > Uisce Beatha (water of live/health) > ----------- > Andor Demarteau E-mail: ademarte@students.cs.uu.nl > student computer science www: http://www.students.cs.uu.nl/~ademarte/ > Utrecht University irc: see webpage for details > ----------- > Believe in yourself, know what you want, and make it happen! > > > > _______________________________________________ > > Blinux-list@redhat.com > https://listman.redhat.com/mailman/listinfo/blinux-list