How can I prevent any software installation during a period of time.

Jaloma · 05-08-2012, 05:13 PM

Hello,
I have a client how requested to block anyone tries install or updated software from 6 am – to 12:30 am.

Any ideas? Many thanks

chrism01 · 05-08-2012, 08:01 PM

In general, you can't ... some sw needs to installed via root, others can be installed by anyone (in their own area).
You really need to be a lot more specific about what kind of install eg OS updates, App SW, what??

You can lock some people out by time period eg using /etc/security/time.conf; not sure if that will help here ...

Jaloma · 05-08-2012, 10:04 PM

According to the SLA we can't install Apps or updates such as security updates. some systems admins do so any way and we want to allow them to logo on and monitor systems during operations hours but preventing them from install Apps and updates during that time. I hope I am clear and thanks for your reply.

Tinkster · 05-09-2012, 04:02 PM

You're clear, but it can't be done. If they can become root, they can do anything.
It's a training issue, slap them if they ignore the SLAs.

chrism01 · 05-09-2012, 08:51 PM

What he (Tinkster) said