-
lock root shell
I need to lock the root shell to stop access to local harddisks. I know, that all passwords are disabled by default.
Can I enable them, especially the root password, when remastering knoppix?
passwd doesnt help because it creates a password for root, but doesnt lock su or the root shell.
Please help me.
Mikkey
uuups, I forgot. The remastered knoppix with passwords enabled should run from cd.
-
I'm guessing here but I would chroot to the uncompressed knoppix, set a root password and also remove sudoers file or edit it. Then remaster; the new burned CD should then not allow su, login as root or sudo unless you know the root password so make it long and difficult. I don't know if there is anything during startup where user knoppix needs su permissions so I think that should work.
-
Senior Member
registered user
Try removing sudo from your remaster. kdesu and gksu both insist on having passwords.
-
Thanks a lot. I try it and tell you.
Mikkey
-
Sorry, it doesnt work, because kde doesnt start anymore.
Any suggestions how to lock the root shell and to enable a root password?
Mikkey
-
Juppiii
it works. Thanks a lot, mzilikazi and Steve F.
First I chroot to the uncompressed knoppix and set a password for root.
Then I removed only sudo from the uncompressed knoppix and remastered it. KDE starts, the root shell is locked, the applications I tested are working.
Only a usb memory stick isnt recogniced any more but that doesnt matter.
Mikkey
-
Aaaargh.
Three root shells / terminals are still open if you press Ctrl-Alt-F2 to F4 in kde.
Any suggestions how to lock them?
Mikkey
-
Ya, that should be an easy fix. Those shells are started up from /etc/inittab . My knoppix CD inittab has lines like these:
1:12345:respawn:/bin/bash -login >/dev/tty1 2>&1 </dev/tty1
2:2345:respawn:/bin/bash -login >/dev/tty2 2>&1 </dev/tty2
3:2345:respawn:/bin/bash -login >/dev/tty3 2>&1 </dev/tty3
4:2345:respawn:/bin/bash -login >/dev/tty4 2>&1 </dev/tty4
The HD install inittab is like this:
1:12345:respawn:/sbin/getty 38400 tty1
2:2345:respawn:/sbin/getty 38400 tty2
3:2345:respawn:/sbin/getty 38400 tty3
4:2345:respawn:/sbin/getty 38400 tty4
5:2345:respawn:/sbin/getty 38400 tty5
6:2345:respawn:/sbin/getty 38400 tty6
You can comment most of them out with '#' at the beginning of the line or remove them completly. I would leave the first one in (HD version) case you need to login. Since it is getty, your user could only do things within the premission set of their login.
-
Thank you, Steve F.
I tried it and it worked.
Great.
Mikkey
Similar Threads
-
By sbratton in forum Hdd Install / Debian / Apt
Replies: 1
Last Post: 12-29-2004, 09:07 PM
-
By xaviers2002 in forum Hdd Install / Debian / Apt
Replies: 14
Last Post: 07-09-2004, 12:29 AM
-
By bhavin in forum General Support
Replies: 0
Last Post: 05-18-2004, 11:16 AM
-
By fritschi in forum General Support
Replies: 1
Last Post: 08-06-2003, 02:30 PM
-
By mabhatter in forum Hardware & Booting
Replies: 0
Last Post: 02-25-2003, 06:49 PM
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
![Vintage Student Edition AUTOCAD Release 10 picture](/store/img/g/T5wAAOSw0ZVmkX06/s-l225/Vintage-Student-Edition-AUTOCAD-Release-10.jpg)
Vintage Student Edition AUTOCAD Release 10
$35.00
![Vintage Commodore 64 Personal Computer - Tested and working Breadbin picture](/store/img/g/YaUAAOSwFrJmkXeX/s-l225/Vintage-Commodore-64-Personal-Computer-Tested-and-.jpg)
Vintage Commodore 64 Personal Computer - Tested and working Breadbin
$125.99
![Vintage Danner leather laptop bag briefcase messenger picture](/store/img/g/3x0AAOSwBUhmhK8u/s-l225/Vintage-Danner-leather-laptop-bag-briefcase-messen.jpg)
Vintage Danner leather laptop bag briefcase messenger
$60.00
![Apple Computer Vintage sheet of 1990s rainbow logo stickers 2 Sticker Sheet picture](/store/img/g/DCIAAOSwsfdmgYEX/s-l225/Apple-Computer-Vintage-sheet-of-1990s-rainbow-logo.jpg)
Apple Computer Vintage sheet of 1990s rainbow logo stickers 2 Sticker Sheet
$4.80
![Vintage Adobe Illustrator User Guide Manual Book Mac Version 6.0 Apple 1995 picture](/store/img/g/INgAAOSw-TRmkXY9/s-l225/Vintage-Adobe-Illustrator-User-Guide-Manual-Book-M.jpg)
Vintage Adobe Illustrator User Guide Manual Book Mac Version 6.0 Apple 1995
$10.00
![Vintage Intel Pentium 200 MMX FV80503200 OEM/Tray Processor picture](/store/img/g/bZwAAOSwNfdmkJNm/s-l225/Vintage-Intel-Pentium-200-MMX-FV80503200-OEM-Tray-.jpg)
Vintage Intel Pentium 200 MMX FV80503200 OEM/Tray Processor
$12.99
![Vintage Dot Matrix Printer Contin Feed Paper 8.5 x 11. Lots of 5 to 250 sheets. picture](/store/img/g/498AAOSwJTdl1MqH/s-l225/Vintage-Dot-Matrix-Printer-Contin-Feed-Paper-8-5-x.jpg)
Vintage Dot Matrix Printer Contin Feed Paper 8.5 x 11. Lots of 5 to 250 sheets.
$4.00
![Vintage 1987 Apple M0110A Keyboard Macintosh picture](/store/img/g/O3IAAOSwPUBmkWwf/s-l225/Vintage-1987-Apple-M0110A-Keyboard-Macintosh.jpg)
Vintage 1987 Apple M0110A Keyboard Macintosh
$45.00
![Vintage Senco Technology ATX Compact Computer Case w CD/Floppy Drive 250W PSU picture](/store/img/g/T8MAAOSwiPlmkENU/s-l225/Vintage-Senco-Technology-ATX-Compact-Computer-Case.jpg)
Vintage Senco Technology ATX Compact Computer Case w CD/Floppy Drive 250W PSU
$99.99
![Apple IIGS ROM 1 Vintage Computer A2S6000 Tested POWERS ON - No Battery Leak picture](/store/img/g/NgkAAOSw-FZmkVZ9/s-l225/Apple-IIGS-ROM-1-Vintage-Computer-A2S6000-Tested-P.jpg)
Apple IIGS ROM 1 Vintage Computer A2S6000 Tested POWERS ON - No Battery Leak
$99.99