I'd like to lobotomize a system through soft means such that it has no way to communicate using any network interfaces. Ideally, in order to reverse this, one would need the root password, and be required to dig through obscure configuration files or execute shell commands.
Anyone have thoughts on how one could go about accomplishing this?
Thanks.
On 05/04/2014 07:57 AM, Someone wrote:
I'd like to lobotomize a system through soft means such that it has no way to communicate using any network interfaces. Ideally, in order to reverse this, one would need the root password, and be required to dig through obscure configuration files or execute shell commands.
Anyone have thoughts on how one could go about accomplishing this?
Thanks.
Easy, compile a custom kernel without any network functions.
John
On Sun, May 4, 2014 at 7:57 AM, Someone someone249@openmailbox.org wrote:
I'd like to lobotomize a system through soft means such that it has no way to communicate using any network interfaces. Ideally, in order to reverse this, one would need the root password, and be required to dig through obscure configuration files or execute shell commands.
Anyone have thoughts on how one could go about accomplishing this?
Just make sure NetworkManager isn't installed in your live image. Then, there's no way a normal user can initiate a network connection. They'd have to manually configure the classic network service or yum install NetworkManager, both of which require root.
The other solutions just make it slightly more complicated for root to restore network access and don't really add any additional security.
Security is nonexistent here anyway, since your user could just boot their own live image, mount your live image within it, and either change the root password or re-enable network access directly from a chroot. If you don't control the hardware, no software security measure in the world can help you.
-T.C.
-
John Wendel -
Someone -
T.C. Hollingsworth