On April 14, 2017 8:28:39 PM PDT, Anton Aylward <opensuse@antonaylward.com> wrote:
On 14/04/17 10:48 PM, John Andersen wrote:
Exactly my point. You have to be at the console. There's no defense against someone at the console.
I would rather say that there's no defence against someone with root password at the console.
Everything that's been mentioned on this thread except for that is configurable: the action arising from the switch that seems the laptop lid closing, for example.
Edit /etc/UPower/UPower.conf and add IgnoreLid=true See also logind.conf(5)
More is configurable with SUDOers, the settings in /etc/pam.d, and of course policykit controls. If you are running SElinux there's more still.
But root at the console, well that's it. You're the system GOD. Even if the system has been set up to stop you doing something "accidentally" you can edit that control out of existence.
See that power cord hanging out the back of the machine? You got that in your hand you don't need no stinkin root. -- Sent from my Android phone with K-9 Mail. Please excuse my brevity. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org