D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] lock down ubuntu

 

One option for a "lockdown" system is a Debian-live session without persistence (on reboot no changes are saved) or to have persistence to a set location only. A user cannot damage the system, since changes are discarded on shutdown/reboot. If su/sudo is disabled a user cannot mount other hard disk partitions.

My Debian-live systems (I use custom scripts for the Exe Linux live builds) boot and run as fast as a normal HD install, especially from ISO image on a fixed disk (which could be a designated, read-only partition)



--
The Mailing List for the Devon & Cornwall LUG
http://mailman.dclug.org.uk/listinfo/list
FAQ: http://www.dcglug.org.uk/listfaq