Why sysrq is limited to only "sync" command on official fedora kernel?

Reindl Harald h.reindl at thelounge.net
Wed Feb 25 17:50:07 UTC 2015


Am 25.02.2015 um 18:47 schrieb Chris Adams:
> Once upon a time, Reindl Harald <h.reindl at thelounge.net> said:
>> when you are on a machine where you have pysical only keyboard and
>> mouse it is not - not every PC stands in front of your face - think
>> about kiosk mode and so on...
>
> But Fedora out-of-the-box is not secured for that already.  An admin
> needs to do additional configuration to secure for a "console does NOT
> have physical access" and "console user is NOT admin" setup

no - but it makes a difference if you need to care abot 20 or 200 things 
to secure - many even don't know about sysrq and so would never come to 
the idea secure sysrq too and so have an unknown door wide open

the users which know about it can enable it
that's the whole purpose of secure defaults

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20150225/c96fa406/attachment.sig>


More information about the devel mailing list