1

I'd like to block physical console access to my linux. I'd like to find, which module is responsible for keyboard input (ps/2, usb, ...) and vga output (only physical), so I can remove them from my kernel (recompile) and then only have access through serial or through ssh.

  • You might also want to disable serial, as that also enables remote physical access – phoops Apr 21 '14 at 12:29
1

Once someone has physical access to the system, there is little you can do. Your best bet would be something like TrueCrypt on all your hard drives, and as we'll as removing the CD and floppy drives as stated in an above answer, hot glue over the SATA/IDE connectors to prevent anyone plugging a CD drive in . Set a really good password on BIOS/ UEFI and turn on tamper detection if your computer supports it. Hot glue the bios reset jumper pins and hot glue or desolder the USB and PS/2 connectors. Glue in the RAM and/or power cable to prevent cold boot attacks, then hot glue, solder or weld the case shut.

After this, software won't matter.

0

How completely do you want to block console access? If it is just for when the system is up and running then you can simply disable getty from running. Look at /etc/init/console.conf and /etc/init/tty?.conf. If you want to make sure that nobody reboots into a live cd then your best bet is to epoxy the USB ports and remove the cd drive from the system.

  • my goal is to block any access to my linux starting from point of kernel booting. So last thing, I'd like to see on my screen is bootmanager. – Artur Szymczak Apr 21 '14 at 13:16
  • 1
    @ArturSzymczak Look into any of the HOWTOs on setting up a serial console. If you tell grub and the kernel that the console is serial only then nothing will go to the VGA console. I think you can also use the same documents to set up grub for both serial and vga console access and just have the kernel redirect /dev/console to the serial port. – doneal24 Apr 22 '14 at 11:32
  • Your answer is perfect for my question. THANK YOU! – Artur Szymczak Apr 22 '14 at 14:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.