On Mon, Jun 11, 2001 at 06:14:30AM +0800, Mike Maravillo wrote:
> On Sat, Jun 09, 2001 at 12:41:10AM +0800, AB Ramos wrote:
> > On Fri, Jun 08, 2001 at 10:37:30PM +0800, Pablo Manalastas wrote:
> > > You can reboot the system if you do the 3-finger salute
> > > Ctrl-Alt-Del.
> >
> > On SuSE (6.2 at least), ctrl-alt-del is mapped to /sbin/shutdown.
> > It can be unmapped by editing /etc/inittab or /etc/rc.config or with
> > yast. Once unmapped, ctrl-alt-del has no effect. I have already
> > forgotten what the default setting is.
> >
> > > To prevent an ordinary user from doing this lock the machine in
> > > the server room and allow only the system administrators to enter
> > > the room.
> > >
> > > You can also reboot the system if you press the reset button. To
> > > prevent this, do as above.
> > >
> > > You can also reboot the system if you unplug then plug the
> > > machine.
> > >
> > > By the way, the above statements apply not only to RedHat but to
> > > other Linux distros, and maybe to other Unix machines.
> >
> > This statement needs to be qualified. ;)
>
> The point is, the user has _physical_ access to the box (read reset
> button, power cable, etc., including the keyboard).
No. Read again the original post. The OP never mentioned physical
access to the box. He only stated _shell_ access, but that's not my
point.
My point being Mr. P. Manalastas' first (sweeping?) statement ("You can
reboot...") is true _only_ under certain circumstances. Consequently,
his last statement ("The above statements apply...") is undermined by
the first as I have demonstrated.
> Therefore, whatever software trick you use to secure the box, it's all
> useless because the user has physical access anyway.
This is quite obvious.
> The inittab trick will only prevent the user from accidentally doing
> the three-finger-salute...
It's not a trick. It's a feature(tm)!. BTW, I'm curious as to how
ctrl-alt-del is handled by other distros. Is it also mapped to a
command, or is it not handled at all?
--
When you don't know what you are doing, do it neatly.
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
