Linux Archive

Linux Archive (http://www.linux-archive.org/)
-   Debian User (http://www.linux-archive.org/debian-user/)
-   -   Can I have repeated login failures at the console cause a shutdown? (http://www.linux-archive.org/debian-user/542998-can-i-have-repeated-login-failures-console-cause-shutdown.html)

Julian Gilbey 06-22-2011 04:35 PM

Can I have repeated login failures at the console cause a shutdown?
 
Does anyone know whether there is a PAM module or equivalent which
can be used to make a system shutdown if there are repeated login
failures at the console, sort of like pam_tally2 or denyhosts, but
with configurable behaviour?

My idea is: if I've left my laptop logged on with the screen locked,
and it is stolen at that point, I'd like a sequence of failed login
attempts in a row to cause the system to shut down, thereby locking my
crypto disks.

(I know this is not a perfect security approach, but it just makes it
somewhat more difficult for a knowledgeable thief to do anything
useful with my data.)

Julian


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: 20110622163551.GA7119@d-and-j.net">http://lists.debian.org/20110622163551.GA7119@d-and-j.net

William Hopkins 06-22-2011 08:20 PM

Can I have repeated login failures at the console cause a shutdown?
 
On 06/22/11 at 05:35pm, Julian Gilbey wrote:
> Does anyone know whether there is a PAM module or equivalent which
> can be used to make a system shutdown if there are repeated login
> failures at the console, sort of like pam_tally2 or denyhosts, but
> with configurable behaviour?
Try pam_exec. With the right stacking, you should be able to get it to do what you need.

> My idea is: if I've left my laptop logged on with the screen locked,
> and it is stolen at that point, I'd like a sequence of failed login
> attempts in a row to cause the system to shut down, thereby locking my
> crypto disks.

Why are you leaving your laptop logged on in an insecure area? You could at the
very least set a boot password and suspend to ram or hibernate.


--
Liam


All times are GMT. The time now is 01:37 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.