Locking down linux

triley · 06-17-2005, 08:45 AM

I'm trying to lock down a couple linux systems for my users. They want their systems configured so that only root can shutdown/halt/reboot a system. Is this as simple as deleting the user shutdown for example from /etc/passwd or is there more to it? Thanks.

alpesh · 06-17-2005, 09:41 AM

try using latest version of bastil .
Its really a good linux hardening software

Noth · 06-17-2005, 10:18 AM

By default only root can run /sbin/shutdown, /sbin/reboot, etc. If you want to disable shutdown/reboot from a display manager you'll have to configure it, i.e. for GDM you can completely disable the system menu or make them require the root password.

If the users have physical access to the box, you'll probably want to comment out the ctrlaltdel line from /etc/inittab so that they can't hit Ctrl+Alt+Del from the console to reboot the box.

craigevil · 06-17-2005, 10:53 AM

Which distro are you using? If you are using Debian take a look at Securing Debian Manual.

The Rute book is a good place to start also.

Like someone else mentioned "Bastille Linux" is a good way to start the hardening process.
The Bastille Hardening program "locks down" an operating system, proactively configuring the system for increased security and decreasing its susceptibility to compromise. Bastille can also assess a system's current state of hardening, granularly reporting on each of the security settings with which it works.