Gentoo Forums
Gentoo Forums
Gentoo Forums
Quick Search: in
Securing TTY1 from physical access.
View unanswered posts
View posts from last 24 hours

 
Reply to topic    Gentoo Forums Forum Index Networking & Security
View previous topic :: View next topic  
Author Message
robet
l33t
l33t


Joined: 06 Sep 2004
Posts: 807
Location: Earth/NorthAmerica/USA/NY

PostPosted: Mon Jan 24, 2005 11:10 pm    Post subject: Securing TTY1 from physical access. Reply with quote

Hello...
I launch FVWM from the first Virtual Terminal with startx (and I'd prefer not to change that). When I leave to do something, I lock the X screen (tty7) with xlockmore. I just realized today that anybody could CRTL-ALT-F1 to the first Virtual Terminal and ^C out of X, leaving them with free access to my home directory. What can I do about this?
_________________
no software patents in europe! | adopt an unanswered post.
Back to top
View user's profile Send private message
Keiss
n00b
n00b


Joined: 19 Sep 2004
Posts: 43
Location: Prague, Czech Republic

PostPosted: Mon Jan 24, 2005 11:39 pm    Post subject: Re: Securing TTY1 from physical access. Reply with quote

robet wrote:
Hello...
I launch FVWM from the first Virtual Terminal with startx (and I'd prefer not to change that). When I leave to do something, I lock the X screen (tty7) with xlockmore. I just realized today that anybody could CRTL-ALT-F1 to the first Virtual Terminal and ^C out of X, leaving them with free access to my home directory. What can I do about this?


Is running the fvwm in background an option for you ? Then you could logout or just lock the terminal with vlock ... If that is not possible for whatever reason , you could jump to another terminal, #2 for example and run
Code:
 vlock --all
But maybe there is a better way i dont know about ...

Keiss
Back to top
View user's profile Send private message
Paladine01
Tux's lil' helper
Tux's lil' helper


Joined: 17 Dec 2003
Posts: 131
Location: Phoenix AZ

PostPosted: Mon Jan 24, 2005 11:46 pm    Post subject: Reply with quote

rc-update add xdm default.

Use a graphical login to get around this problem. That way if they switch over to a text terminal they'll have to login.
Back to top
View user's profile Send private message
Keiss
n00b
n00b


Joined: 19 Sep 2004
Posts: 43
Location: Prague, Czech Republic

PostPosted: Mon Jan 24, 2005 11:51 pm    Post subject: Reply with quote

Quote:
Use a graphical login to get around this problem. That way if they switch over to a text terminal they'll have to login.

well yes you are right , but as i understand that is not an option for robet ....
Quote:
I launch FVWM from the first Virtual Terminal with startx (and I'd prefer not to change that).
Back to top
View user's profile Send private message
robet
l33t
l33t


Joined: 06 Sep 2004
Posts: 807
Location: Earth/NorthAmerica/USA/NY

PostPosted: Tue Jan 25, 2005 12:15 am    Post subject: Reply with quote

I like startx'ing, because often I don't even need FVWM, I stay in terminal.
Trying the vlock method now... separately, isn't there some way to do this with screen?
edit0: Is there a way to tell vlock to lock all TTYs from inside FVWM, preferably executed whenever I xlockmore?
_________________
no software patents in europe! | adopt an unanswered post.
Back to top
View user's profile Send private message
Keiss
n00b
n00b


Joined: 19 Sep 2004
Posts: 43
Location: Prague, Czech Republic

PostPosted: Tue Jan 25, 2005 12:37 am    Post subject: Reply with quote

Code:
Trying the vlock method now... separately, isn't there some way to do this with screen?
If you mean vlocking in a screen ... you could startx from a screen window , then create another one , and vlock it ( apart from locking X with xlockmore), but that's just a variation on the same theme ;-)

Quote:
Is there a way to tell vlock to lock all TTYs from inside FVWM, preferably executed whenever I xlockmore?

As far as i know ... no , you have to lock it from a terminal.
Back to top
View user's profile Send private message
robet
l33t
l33t


Joined: 06 Sep 2004
Posts: 807
Location: Earth/NorthAmerica/USA/NY

PostPosted: Tue Jan 25, 2005 3:52 am    Post subject: Reply with quote

Other opinions?
_________________
no software patents in europe! | adopt an unanswered post.
Back to top
View user's profile Send private message
Display posts from previous:   
Reply to topic    Gentoo Forums Forum Index Networking & Security All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum