Desgaitu komando-lerroaren bidezko sarbidea

To disable command-line access for your desktop user, you need to make configuration changes in a number of different contexts. Bear in mind that the following steps do not remove the desktop user's permissions to access a command line, but rather remove the ways that the desktop user could access the command line.

  • Set the org.gnome.desktop.lockdown.disable-command-line GSettings key, which prevents the user from accessing the terminal or specifying a command line to be executed (the Alt+F2 command prompt).

  • Eragotzi erabiltzaileek Alt+F2 komando-gonbita atzitu dezaten.

  • Disable switching to virtual terminals (VTs) with the Ctrl+Alt+function key shortcuts by modifying the X server configuration.

  • Remove Terminal and all other terminal applications from the Activities overview in GNOME Shell. You will also need to prevent the user from installing a new terminal application.

Desgaitu komando-gonbita

  1. Sortu user profila honako lerroekin:

    /etc/dconf/profile/user

    user-db:user
system-db:local

    local izena dconf datu-basearen izena da.

  2. Sortu makina osorako diren ezarpenak gordetzeko local datu-base bat /etc/dconf/db/local.d/00-lockdown fitxategian:

    # Zehaztu dconf bide-izena
[org/gnome/desktop/lockdown]

# Desgaitu komando-gonbita
disable-command-line=true

  3. Indargabetu erabiltzaile-ezarpena eta eragotzi erabiltzaileak /etc/dconf/db/local.d/locks/lockdown gunean aldatu dezan:

    # Zerrendatu blokeoa konfiguratzeko erabilitako gakoak
/org/gnome/desktop/lockdown/disable-command-line

  4. Eguneratu sistemaren datu-baseak:

    # dconf update

  5. Erabiltzaileek saioa amaitu eta berriro hasi behar dute sistema-ezarpenak indarrean sartzeko.

Desgaitu terminal birtual batera joatea

Users can normally use the Ctrl+Alt+function key shortcuts (for example, Ctrl+Alt+F2) to switch from the GNOME desktop to a virtual terminal.

If the computer is running the X Window System, you can disable access to all virtual terminals by adding a DontVTSwitch option to the Serverflags section in an X configuration file in the /etc/X11/xorg.conf.d/ directory.

  1. Sortu edo editatu /etc/X11/xorg.conf.d/ direktorioko X konfigurazio-fitxategi bat. Adibidez, /etc/X11/xorg.conf.d/10-xorg.conf:

    /etc/X11/xorg.conf.d/10-xorg.conf

    Section "Serverflags"

Option "DontVTSwitch" "yes"

EndSection

  2. Berrabiarazi X zerbitzaria aldaketak indarrean sartu daitezen.