[ILUG] linux single prevention

[Stephen_Reilly at dell.com]

	oh wait, 0400 read by owner + 0200 write by owner + 0100 for
excecute by owner = 0700 oh, ok then.

-----Original Message-----
From: Stephen_Reilly at dell.com [mailto:Stephen_Reilly at dell.com]
Sent: 24 July 2001 15:02
To: saeed1962 at yahoo.com
Cc: ilug at linux.ie
Subject: RE: [ILUG] linux single prevention



	if in the unlikely event you actually want to disable single user
boot altogether: edit the /etc/inittab change the line
"l1:1:wait:/etc/rc.d/rc 1" to read "l1:1:wait:/etc/rc.d/rc 3". This will
force it into level 3 (multi user boot). To stop people bypassing this with
an init command at boot up use Dave's method of locking lilo and restricting
the image, below. I'd put the restricted keyword before
image=/boot/vmlinuz-2blah.
	Would you not set lilo.conf to mode 0600 ? Also BIOS passwd the
system and disable booting from CD-Rom, floppy and network :)

steve

-----Original Message-----
From: daveb at esat.net [mailto:daveb at esat.net]
Sent: 24 July 2001 14:23
To: saeed babadi nia
Cc: ilug at linux.ie
Subject: Re: [ILUG] linux single prevention



in your /etc/lilo.conf,add the following

restricted
password=<some password>


and then run 
chmod 0700 /etc/lilo.conf
/sbin/lilo -v

Then, anyone who tries to supply arguments when booting a kernel, will have
to 
supply the password you gave in the /etc/lilo.conf file.

'man lilo.conf'  for more information

Dave




-- 
Irish Linux Users' Group: ilug at linux.ie
http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
List maintainer: listmaster at linux.ie

-- 
Irish Linux Users' Group: ilug at linux.ie
http://www.linux.ie/mailman/listinfo/ilug for (un)subscription information.
List maintainer: listmaster at linux.ie