Petr Kovar
pknbe@volny.cz 2014
Ekaterina Gerasimova
kittykat3756@gmail.com 2014
Jana Svarova
jana.svarova@gmail.com 2015
Evita que os usuarios accedan á liña de ordes.
Fran Diéguez
frandieguez@gnome.org 2010-2018

# Desactivar o acceso á liña de ordes

To disable command-line access for your desktop user, you need to make configuration changes in a number of different contexts. Bear in mind that the following steps do not remove the desktop user's permissions to access a command line, but rather remove the ways that the desktop user could access the command line.

Set the `org.gnome.desktop.lockdown.disable-command-line` GSettings key, which prevents the user from accessing the terminal or specifying a command line to be executed (the Alt F2 command prompt).

Prevent users from accessing the AltF2 command prompt.

Disable switching to virtual terminals (VTs) with the CtrlAltfunction key shortcuts by modifying the X server configuration.

Remove Terminal and all other terminal applications from the Activities overview in GNOME Shell. You will also need to prevent the user from installing a new terminal application.

# Desacetiva a liña de ordes

Create a local database for machine-wide settings in /etc/dconf/db/local.d/00-lockdown:

# Especifica a ruta de dconf [org/gnome/desktop/lockdown]

# Desactiva a liña de ordes disable-command-line=true

Override the user’s setting and prevent the user from changing it in /etc/dconf/db/local.d/locks/lockdown:

# List the keys used to configure lockdown /org/gnome/desktop/lockdown/disable-command-line

# Disable dropping to a virtual terminal

Users can normally use the CtrlAltfunction key shortcuts (for example, CtrlAltF2) to switch from the GNOME desktop to a virtual terminal.

If the computer is running the X Window System, you can disable access to all virtual terminals by adding a `DontVTSwitch` option to the `Serverflags` section in an X configuration file in the /etc/X11/xorg.conf.d/ directory.

Create or edit an X configuration file in /etc/X11/xorg.conf.d/. For example, /etc/X11/xorg.conf.d/10-xorg.conf:

## /etc/X11/xorg.conf.d/10-xorg.conf

Section "Serverflags"

Option "DontVTSwitch" "yes"

EndSection

Restart the X server for the changes to take effect.