Desactivar o acceso á liña de ordes

To disable command-line access for your desktop user, you need to make configuration changes in a number of different contexts. Bear in mind that the following steps do not remove the desktop user's permissions to access a command line, but rather remove the ways that the desktop user could access the command line.

  • Set the org.gnome.desktop.lockdown.disable-command-line GSettings key, which prevents the user from accessing the terminal or specifying a command line to be executed (the Alt+F2 command prompt).

  • Prevent users from accessing the Alt+F2 command prompt.

  • Disable switching to virtual terminals (VTs) with the Ctrl+Alt+function key shortcuts by modifying the X server configuration.

  • Remove Terminal and all other terminal applications from the Activities overview in GNOME Shell. You will also need to prevent the user from installing a new terminal application.

Desacetiva a liña de ordes

  1. Cree o perfíl user que contén as seguintes liñas:

    /etc/dconf/profile/user

    user-db:user
system-db:local

    local é o nome dunha base de datos dconf.

  2. Create a local database for machine-wide settings in /etc/dconf/db/local.d/00-lockdown:

    # Especifica a ruta de dconf
[org/gnome/desktop/lockdown]

# Desactiva a liña de ordes
disable-command-line=true

  3. Override the user’s setting and prevent the user from changing it in /etc/dconf/db/local.d/locks/lockdown:

    # List the keys used to configure lockdown
/org/gnome/desktop/lockdown/disable-command-line

  4. Actualizar a base de datos do sistema:

    # dconf update

  5. Os usuarios deben pechar a sesión e iniciala de novo para que a configuración a nivel de sistema se aplique.

Desactivar soltar dun terminal virtual

Users can normally use the Ctrl+Alt+function key shortcuts (for example, Ctrl+Alt+F2) to switch from the GNOME desktop to a virtual terminal.

If the computer is running the X Window System, you can disable access to all virtual terminals by adding a DontVTSwitch option to the Serverflags section in an X configuration file in the /etc/X11/xorg.conf.d/ directory.

  1. Create or edit an X configuration file in /etc/X11/xorg.conf.d/. For example, /etc/X11/xorg.conf.d/10-xorg.conf:

    /etc/X11/xorg.conf.d/10-xorg.conf

    Section "Serverflags"

Option "DontVTSwitch" "yes"

EndSection

  2. Reinicie o servidor X para que os cambios se apliquen.