View previous topic :: View next topic |
Author |
Message |
robet l33t
![l33t l33t](/images/ranks/rank_rect_4.gif)
![](images/avatars/1706288425419a4950c8baf.jpg)
Joined: 06 Sep 2004 Posts: 807 Location: Earth/NorthAmerica/USA/NY
|
Posted: Mon Jan 24, 2005 11:10 pm Post subject: Securing TTY1 from physical access. |
|
|
Hello...
I launch FVWM from the first Virtual Terminal with startx (and I'd prefer not to change that). When I leave to do something, I lock the X screen (tty7) with xlockmore. I just realized today that anybody could CRTL-ALT-F1 to the first Virtual Terminal and ^C out of X, leaving them with free access to my home directory. What can I do about this? _________________ no software patents in europe! | adopt an unanswered post. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Keiss n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
![](images/avatars/208738236041f251d41cb6b.jpg)
Joined: 19 Sep 2004 Posts: 43 Location: Prague, Czech Republic
|
Posted: Mon Jan 24, 2005 11:39 pm Post subject: Re: Securing TTY1 from physical access. |
|
|
robet wrote: | Hello...
I launch FVWM from the first Virtual Terminal with startx (and I'd prefer not to change that). When I leave to do something, I lock the X screen (tty7) with xlockmore. I just realized today that anybody could CRTL-ALT-F1 to the first Virtual Terminal and ^C out of X, leaving them with free access to my home directory. What can I do about this? |
Is running the fvwm in background an option for you ? Then you could logout or just lock the terminal with vlock ... If that is not possible for whatever reason , you could jump to another terminal, #2 for example and run But maybe there is a better way i dont know about ...
Keiss |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Paladine01 Tux's lil' helper
![Tux's lil' helper Tux's lil' helper](/images/ranks/rank_rect_1.gif)
Joined: 17 Dec 2003 Posts: 131 Location: Phoenix AZ
|
Posted: Mon Jan 24, 2005 11:46 pm Post subject: |
|
|
rc-update add xdm default.
Use a graphical login to get around this problem. That way if they switch over to a text terminal they'll have to login. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Keiss n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
![](images/avatars/208738236041f251d41cb6b.jpg)
Joined: 19 Sep 2004 Posts: 43 Location: Prague, Czech Republic
|
Posted: Mon Jan 24, 2005 11:51 pm Post subject: |
|
|
Quote: | Use a graphical login to get around this problem. That way if they switch over to a text terminal they'll have to login. |
well yes you are right , but as i understand that is not an option for robet ....
Quote: | I launch FVWM from the first Virtual Terminal with startx (and I'd prefer not to change that). |
|
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
robet l33t
![l33t l33t](/images/ranks/rank_rect_4.gif)
![](images/avatars/1706288425419a4950c8baf.jpg)
Joined: 06 Sep 2004 Posts: 807 Location: Earth/NorthAmerica/USA/NY
|
Posted: Tue Jan 25, 2005 12:15 am Post subject: |
|
|
I like startx'ing, because often I don't even need FVWM, I stay in terminal.
Trying the vlock method now... separately, isn't there some way to do this with screen?
edit0: Is there a way to tell vlock to lock all TTYs from inside FVWM, preferably executed whenever I xlockmore? _________________ no software patents in europe! | adopt an unanswered post. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
Keiss n00b
![n00b n00b](/images/ranks/rank_rect_0.gif)
![](images/avatars/208738236041f251d41cb6b.jpg)
Joined: 19 Sep 2004 Posts: 43 Location: Prague, Czech Republic
|
Posted: Tue Jan 25, 2005 12:37 am Post subject: |
|
|
Code: | Trying the vlock method now... separately, isn't there some way to do this with screen? | If you mean vlocking in a screen ... you could startx from a screen window , then create another one , and vlock it ( apart from locking X with xlockmore), but that's just a variation on the same theme
Quote: | Is there a way to tell vlock to lock all TTYs from inside FVWM, preferably executed whenever I xlockmore? |
As far as i know ... no , you have to lock it from a terminal. |
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
robet l33t
![l33t l33t](/images/ranks/rank_rect_4.gif)
![](images/avatars/1706288425419a4950c8baf.jpg)
Joined: 06 Sep 2004 Posts: 807 Location: Earth/NorthAmerica/USA/NY
|
|
Back to top |
|
![](templates/gentoo/images/spacer.gif) |
|