Unix & Linux Stack Exchange is a question and answer site for users of Linux, FreeBSD and other Un*x-like operating systems. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm haved created an account on ubuntu that is just a standard user but with no internet access. I have also removed 'recovery mode' from the grub menu so that one cannot just choose this option access root and reverse all my changes (maybe a safer option could have been passwording this rather than removing...), but this still leaves the option of simply booting into the liveCD/USB and being able to access the internet etc...

Is there a way to prevent a user being able to boot into liveCD environment?

share|improve this question
If network access is the core issue, you could consider just removing the network card. You can always plug in a usb network interface to do updates etc. – ire_and_curses Sep 10 '12 at 17:51
up vote 1 down vote accepted

You will need to do this in 2 steps,

  1. Set a password for grub, so one can't modify boot entry
  2. Lock down BIOS with a password, disable external media boot

Optionally, you could encrypt the root volume, so even booted from another media, one can find it hard to modify settings

share|improve this answer

Set the options in the BIOS to disallow booting from external media and password lock BIOS access so the user can't re-enable it.

share|improve this answer

What bahamat said. But keep in mind that if someone has physical access to a host, they can pretty much do whatever they want. BIOS settings can be overridden by pulling the cmos battery, for instance.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.