Debian Ubuntu Update Script with Switch OFF after update

Problem:
I f you work on you PC daily Patches must be checked and installed.
At Debian / Ubuntu the Gnome-Update-Manager does this. But there is
NO Shutdown possible after update.

Solution:
– create Script #sudo nano /root/upgrade-off.sh
add inside:

apt-get update           //for update Patches Database PC
apt-get dist-upgrade -y         //install Patches automatic
apt-get clean      //cleanup PC
/sbin/init 0      //shutdown PC automatic or reboot Server = init 6
exit

You can now after work set it to crontab or start manual by #sudo sh /root/upgrade-off.sh

On Servers name it upgrade-reboot.sh and set root cron to run the job @hourly/@daily

Ubuntu 10.04 Lucid Lynx Kiosk Mode

If you run your PC as Family PC for Kids or Public PC you have to make some changes:

Step:
– Setup Ubuntu 10.04 with alternate Disk!
– select XDM as Login Manager by default!!
– go /etc/init folder as root
– edit control-alt-delete.conf and disable reboot without login
– go /etc/acpi make chmod 000 on powerbtn.sh hibernation.sh lidbtn.sh to prevent unwanted shutdown
– make #sudo aptitude remove gnome-power-manager to prevent unwanted standby by all users
– test forced shutdowns pressing all buttons at menu
– optional add autologin at login manger for a user without „sudo“ rights
– optional add to startup the „opera -kioskmode“ Browser Command (fullscreen Opera to hide Desktop to prevent users to reach files on the system)

Ubuntu 10.04 Lucid Lynx disable hide REBOOT SHUTDOWN STANDBY SUSPEND GNOME SYSTEM MENU SECURE KIOSK MODE

Problem: If you install ubuntu 10.04 Desktop by default
every user can shutdown,reboot,hibernate or standby a PC

If you want to disable this make:
– install gdm2conf from the ppa channel to customize hide System Menu at Login GDM2 Manager
– create custom Gnome System Menu Policy against User shutdown,reboot,hibernate or standby.

Steps:
create new policy file:
#sudo touch /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

edit new policy:
#nano nano /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

insert into:
[Disable suspend]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.suspend
ResultActive=no
ResultAny=no

[Disable hibernate]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.hibernate
ResultActive=no
ResultAny=no

[Disable shutdown]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.stop
ResultActive=no
ResultAny=no

[Disable reboot]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.restart
ResultActive=no
ResultAny=no

reboot and try!

To disable CTRL-ALT-DEL REBOOT edit #sudo nano /etc/init/control-alt-delete.conf
comment out:
#start on control-alt-delete

#task
#exec shutdown -r now „Control-Alt-Delete pressed“

For high Security:
disable TTY Consoles 1-6 with edit /etc/init/ttyX.conf (Value of X = 1-6)
comment out:
#respawn
#exec /sbin/getty -8 38400 tty1

Change at rights of /sbin/reboot /sbin/halt /sbin/shutdown /sbin/poweroff
that shutdown or reboot the System to 0700 from Console (SSH)

If you can access the PC Case cut the Reset and Power Cable from Mainboard
fix the Power Cable at Wall and PC against cut off !! PC inside locked steel Server Rack!!
(used are cheap at ebay)

AFTER ALL of this you can only reboot/shutdown with #sudo reboot or #sudo init 0!

Ubuntu 10.04 Lucid Lynx Kiosk Mode

If you run your PC as Family PC for Kids or Public PC you have to make some changes:

Step:

  1. Setup Ubuntu 10.04 with alternate Disk!
  2. select XDM as Login Manager by default!!
  3. go /etc/init folder as root
  4. edit control-alt-delete.conf and disable reboot without login
  5. go /etc/acpi make chmod 000 on powerbtn.sh hibernation.sh lidbtn.sh to prevent unwanted shutdown
  6. make
    #sudo aptitude remove gnome-power-manager
    to prevent unwanted standby by all users
  7. test forced shutdowns pressing all buttons at menu
  8. optional add autologin at login manger for a user without „sudo“ rights
  9. optional add to startup the
    opera -kioskmode
    Browser Command (fullscreen Opera to hide Desktop to prevent users to reach files on the system)

Ubuntu 10.04 Lucid Lynx disable hide REBOOT SHUTDOWN STANDBY SUSPEND GNOME SYSTEM MENU SECURE KIOSK MODE

Problem: If you install ubuntu 10.04 Desktop by default
every user can shutdown,reboot,hibernate or standby a PC

If you want to disable this make:
– install gdm2conf from the ppa channel to customize hide System Menu at Login GDM2 Manager
– create custom Gnome System Menu Policy against User shutdown,reboot,hibernate or standby.

Steps:
create new policy file:

#sudo touch /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

edit new policy:

#nano nano /etc/polkit-1/localauthority/50-local.d/custom-menu.pkla

insert into:

[Disable suspend]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.suspend
ResultActive=no
ResultAny=no
[Disable hibernate]
Identity=unix-user:*
Action=org.freedesktop.devicekit.power.hibernate
ResultActive=no
ResultAny=no
[Disable shutdown]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.stop
ResultActive=no
ResultAny=no
[Disable reboot]
Identity=unix-user:*
Action=org.freedesktop.consolekit.system.restart
ResultActive=no
ResultAny=no

reboot and try!

To disable CTRL-ALT-DEL REBOOT edit

#sudo nano /etc/init/control-alt-delete.conf

comment out:
#start on control-alt-delete
#task
#exec shutdown -r now "Control-Alt-Delete pressed"

For high Security:
disable TTY Consoles 1-6 with edit /etc/init/ttyX.conf (Value of X = 1-6)
comment out:

#respawn
#exec /sbin/getty -8 38400 tty1

Change at rights of /sbin/reboot /sbin/halt /sbin/shutdown /sbin/poweroff
that shutdown or reboot the System to 0700 from Console (SSH)

If you can access the PC Case cut the Reset and Power Cable from Mainboard
fix the Power Cable at Wall and PC against cut off !! PC inside locked steel Server Rack!!
(used are cheap at ebay)

AFTER ALL of this you can only reboot/shutdown with

#sudo reboot
or
#sudo init 0