juergen.braukmann@ruhr-west.de tapped away at the keyboard with:
MMTS System Administrator wrote:
Is there a possibility to disable all hints like "linux -s", "linux init", etc. ? (I guess, this question requires wider answer than "yes".)
Of course, it is a kinda dangerous, but we don't want no users to be able to do anything at server.
well... The answer is indeed yes and involves reading some man pages documentation. i.e. man lilo or lilo.conf. There is a "password" option in lilo that comes with another optional parameter. The one version requires a pw for booting, the other enables boot but will ask a pw if you want to add boot parameters like the ones we talk about.
The password is only needed for installing lilo, the paranoid admin (that doesn't trust read only to root) deletes it after running lilo from lilo.conf, aproximately one day before forgetting it. <grin> Then, you'll face a "real" problem if you also apply the following: Do not forget to disable CD and disk boot, otherwise you'll leave a back door the size of andromeda. Protect the bios with a password, bolt the machine solid to the floor and fix a solid lock on the case to prevent it from beeing opened. All must be placed in a locked room with the "no cleaning today" sign on the door. (Don't forget to disconnect the network!)
Did I miss anything? Got to stop now, there are some *kind* white dressed men trying to take me away from my keyboard.
You missed the armed guard at the door being watched via video link from a remote location, from where the door can be unlocked; the Faraday cage around the room; the full-online UPS for the computer and the cooling system; ... Of course, the "server" should be in a cave carved out of granite near a mountain-top, at least 60 metres below the surface. -- Bernd Felsche - Innovative Reckoning Perth, Western Australia -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq