Comments (0)

Von Thomas Sternasky, Donnerstag, September 23, 2010

Problem:
I f you work on you PC daily Patches must be checked and installed.
At Debian / Ubuntu the Gnome-Update-Manager does this. But there is
NO Shutdown possible after update.

Solution:
- create Script #sudo nano /root/upgrade-off.sh
add inside:

apt-get update           //for update Patches Database PC
apt-get dist-upgrade -y         //install Patches automatic
apt-get clean      //cleanup PC
/sbin/init 0      //shutdown PC automatic or reboot Server = init 6
exit


You can now after work set it to crontab or start manual by #sudo sh /root/upgrade-off.sh

On Servers name it upgrade-reboot.sh and set root cron to run the job @hourly/@daily

Comments (0)

Von Thomas Sternasky, Donnerstag, September 23, 2010

Problem: If you install ubuntu 10.04 Desktop by default
every user can shutdown,reboot,hibernate or standby a PC

If you want to disable this make:
- install gdm2conf from the ppa channel to customize hide System Menu at Login GDM2 Manager
- create custom Gnome System Menu Policy against User shutdown,reboot,hibernate or standby.

Steps:
create new policy file:
#sudo touch /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

edit new policy:
#nano nano /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

insert into:
[Disable suspend]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.suspend
ResultActive=no
ResultAny=no

[Disable hibernate]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.hibernate
ResultActive=no
ResultAny=no

[Disable shutdown]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.stop
ResultActive=no
ResultAny=no

[Disable reboot]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.restart
ResultActive=no
ResultAny=no

reboot and try!

To disable CTRL-ALT-DEL REBOOT edit #sudo nano /etc/init/control-alt-delete.conf
comment out:
#start on control-alt-delete

#task
#exec shutdown -r now “Control-Alt-Delete pressed”

For high Security:
disable TTY Consoles 1-6 with edit /etc/init/ttyX.conf (Value of X = 1-6)
comment out:
#respawn
#exec /sbin/getty -8 38400 tty1

Change at rights of /sbin/reboot /sbin/halt /sbin/shutdown /sbin/poweroff
that shutdown or reboot the System to 0700 from Console (SSH)

If you can access the PC Case cut the Reset and Power Cable from Mainboard
fix the Power Cable at Wall and PC against cut off !! PC inside locked steel Server Rack!!
(used are cheap at ebay)

AFTER ALL of this you can only reboot/shutdown with #sudo reboot or #sudo init 0!

Comments (0)

Von Thomas Sternasky, Mittwoch, Mai 19, 2010

Problem: If you install ubuntu 10.04 Desktop by default
every user can shutdown,reboot,hibernate or standby a PC

If you want to disable this make:
- install gdm2conf from the ppa channel to customize hide System Menu at Login GDM2 Manager
- create custom Gnome System Menu Policy against User shutdown,reboot,hibernate or standby.

Steps:
create new policy file:
#sudo touch /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

edit new policy:
#nano nano /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

insert into:
[Disable suspend]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.suspend
ResultActive=no
ResultAny=no
[Disable hibernate]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.hibernate
ResultActive=no
ResultAny=no
[Disable shutdown]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.stop
ResultActive=no
ResultAny=no
[Disable reboot]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.restart
ResultActive=no
ResultAny=no

reboot and try!

To disable CTRL-ALT-DEL REBOOT edit #sudo nano /etc/init/control-alt-delete.conf
comment out:
#start on control-alt-delete
#task
#exec shutdown -r now "Control-Alt-Delete pressed"

For high Security:
disable TTY Consoles 1-6 with edit /etc/init/ttyX.conf (Value of X = 1-6)
comment out:
#respawn
#exec /sbin/getty -8 38400 tty1

Change at rights of /sbin/reboot /sbin/halt /sbin/shutdown /sbin/poweroff
that shutdown or reboot the System to 0700 from Console (SSH)

If you can access the PC Case cut the Reset and Power Cable from Mainboard
fix the Power Cable at Wall and PC against cut off !! PC inside locked steel Server Rack!!
(used are cheap at ebay)

AFTER ALL of this you can only reboot/shutdown with #sudo reboot or #sudo init 0