<page xmlns="http://projectmallard.org/1.0/" xmlns:its="http://www.w3.org/2005/11/its" type="topic" style="task" id="lockdown-command-line" xml:lang="es">

  <info>

    <link type="guide" xref="software#management"/>

    <revision pkgversion="3.12" date="2014-06-18" status="review"/>

    <credit type="author copyright">

      <name>Petr Kovar</name>

      <email>pknbe@volny.cz</email>

      <years>2014</years>

    </credit>

    <credit type="author copyright">

      <name>Ekaterina Gerasimova</name>

      <email>kittykat3756@gmail.com</email>

      <years>2014</years>

    </credit>

    <include xmlns="http://www.w3.org/2001/XInclude" href="legal.xml"/>

    <desc>Prevent users from accessing the command-line.</desc>

    <mal:credit xmlns:mal="http://projectmallard.org/1.0/" type="translator copyright">

      <mal:name>Daniel Mustieles</mal:name>

      <mal:email>daniel.mustieles@gmail.com</mal:email>

      <mal:years>2017</mal:years>

    </mal:credit>

  </info>

  <title>Desactivar el acceso por línea de comandos</title>

  
You can prevent users from being able to access the command-line through

  virtual terminals and terminal applications by following the steps described

  below.

  <list>

    <item>

      
Prevent users from accessing the

      <keyseq><key>Alt</key><key>F2</key></keyseq> command prompt.

    </item>

    <item>

      
Disable dropping to a virtual terminal (VT).

    </item>

    <item>

      
Remove <app>Terminal</app> and all other terminal applications from

      the <gui>Activities</gui> overview in GNOME Shell. You will also need to

      prevent the user from installing a new terminal application.

    </item>

  </list>

<section id="command-prompt">

  <title>Desactivar la línea de comandos</title>

  <steps>

    <include xmlns="http://www.w3.org/2001/XInclude" href="dconf-snippets.xml" xpointer="xpointer(/*/*[@xml:id='dconf-profile-user'])"/>

    <item>

      
Create a <sys>local</sys> database for machine-wide settings in

      <file>/etc/dconf/db/local.d/00-lockdown</file>:

      # Specify the dconf path

[org/gnome/desktop/lockdown]

# Disable the command prompt

disable-command-line=true

    </item>

    <item>

      
Override the user’s setting and prevent the user from changing it in

      <file>/etc/dconf/db/local.d/locks/lockdown</file>:

      # List the keys used to configure lockdown

/org/gnome/desktop/lockdown/disable-command-line

    </item>

    <include xmlns="http://www.w3.org/2001/XInclude" href="dconf-snippets.xml" xpointer="xpointer(/*/*[@xml:id='dconf-update'])"/>

    <include xmlns="http://www.w3.org/2001/XInclude" href="dconf-snippets.xml" xpointer="xpointer(/*/*[@xml:id='dconf-logoutin'])"/>

  </steps>

</section>

<section id="virtual-terminal">

  <title>Disable dropping to a virtual terminal</title>

  
Users can normally use the

  <keyseq><key>Ctrl</key><key>Alt</key><key>function

  key</key></keyseq> shortcuts (for example,

  <keyseq><key>Ctrl</key><key>Alt</key><key>F2</key></keyseq>) to switch from

  the GNOME desktop to a virtual terminal.

  
If the computer is running the X Window System, you can disable

  access to all virtual terminals by adding a DontVTSwitch option

  to the Serverflags section in the

  <file>/etc/X11/xorg.conf.d</file> file.

  <steps>

    <item>

      
Create or edit an X configuration file in

      <file>/etc/X11/xorg.conf.d</file>:

      Section "Serverflags"

Option "DontVTSwitch" "yes"

EndSection

    </item>

    <item>

      
Reinicie GDM para que los cambios surtan efecto.

    </item>

  </steps>

</section>

</page>