13.4. Disabling Command-Line Access

1. Create a local database for machine-wide settings in /etc/dconf/db/local.d/00-lockdown:

   [org/gnome/desktop/lockdown]
   # Disable command-line access
   disable-command-line=true

   Copy to Clipboard Toggle word wrap
2. Override the user's setting and prevent the user from changing it in /etc/dconf/db/local.d/locks/lockdown:

   # Lock the disabled command-line access
   /org/gnome/desktop/lockdown
   

   Copy to Clipboard Toggle word wrap
3. Update the system databases:

   # dconf update

   Copy to Clipboard Toggle word wrap
4. Users must log out and back in again before the system-wide settings take effect.

Procedure 13.4. Disabling Access to Virtual Terminals

1. Create or edit an X configuration file in the /etc/X11/xorg.conf.d/ directory:

   Note

   By convention, these host-specific configuration file names start with two digits and a hyphen and always have the .conf extension. Thus, the following file name can be /etc/X11/xorg.conf.d/10-xorg.conf.

   Section "Serverflags"
   
   Option "DontVTSwitch" "yes"
   
   EndSection

   Copy to Clipboard Toggle word wrap
2. Restart the X server for your changes to take effect.