On 14/04/17 10:48 PM, John Andersen wrote:
Exactly my point. You have to be at the console. There's no defense against someone at the console.
I would rather say that there's no defence against someone with root password at the console. Everything that's been mentioned on this thread except for that is configurable: the action arising from the switch that seems the laptop lid closing, for example. Edit /etc/UPower/UPower.conf and add IgnoreLid=true See also logind.conf(5) More is configurable with SUDOers, the settings in /etc/pam.d, and of course policykit controls. If you are running SElinux there's more still. But root at the console, well that's it. You're the system GOD. Even if the system has been set up to stop you doing something "accidentally" you can edit that control out of existence. -- A: Yes. > Q: Are you sure? >> A: Because it reverses the logical flow of conversation. >>> Q: Why is top posting frowned upon? -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org