Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Can I password protect my terminal?

E

Ego killer

macrumors newbie
Original poster
Feb 1, 2012
11
0
Hey is there a way to put a password on my Terminal?

My little brother keeps getting into my terminal and changing my password, computer name, etc..

How can I stop this?
 
He needs to be able to get on it though.. If I make another account with restrictions will he still be able to get into the terminal?

----------
Intell said:
Make an encrypted disk image and put the Terminal app into it.
Click to expand...

How do I make an encrypted disk image?
 
Ego killer said:
He needs to be able to get on it though.. If I make another account with restrictions will he still be able to get into the terminal?
Click to expand...

Yes, but he won't be able to do much if you make it a standard account. You can even restrict the allowed applications.

How do I make an encrypted disk image?
Click to expand...

Don't do this. It is pointless and doesn't solve the problem.
 
calderone said:
Yes, but he won't be able to do much if you make it a standard account. You can even restrict the allowed applications.
Click to expand...

There isn't a way to just lock Terminal? I want him on my computer when I'm not around but just not on my Terminal. I don't want him messing with things.
 
Ego killer said:
There isn't a way to just lock Terminal? I want him on my computer when I'm not around but just not on my Terminal. I don't want him messing with things.
Click to expand...

If he has a standard account you won't need to lock Terminal, as he won't be able to do much of anything.

However, you can use Parental Controls to lock down Applications. Here you go.

http://gigaom.com/apple/kid-proofing-a-mac-with-parental-controls/

If he is that inquisitive you may want to set a firmware password, to restrict single user mode, etc.
 
Ego killer said:
There isn't a way to just lock Terminal? I want him on my computer when I'm not around but just not on my Terminal. I don't want him messing with things.
Click to expand...

When he is messing with things, he is not really earning any privileges, is he. Just make him a standard user account and keep Terminal restricted via Parental Controls, though if your brother is able to change credentials in Terminal, he can surely just log into your user via resetting its password.
 
I've made him a standard account before and his smartass has got into terminal i'm guessing and changed his account to an administrator..

any thoughts?
 
simsaladimbamba said:
When he is messing with things, he is not really earning any privileges, is he. Just make him a standard user account and keep Terminal restricted via Parental Controls, though if your brother is able to change credentials in Terminal, he can surely just log into your user via resetting its password.
Click to expand...

This won't be possible in a standard user account. It would require escalated privileges.


Ego killer said:
I've made him a standard account before and his smartass has got into terminal i'm guessing and changed his account to an administrator..

any thoughts?
Click to expand...

Lock down Terminal with Parental Controls. Use a firmware password to restrict booting to the DVD or single user mode.
 
simsaladimbamba said:
When he is messing with things, he is not really earning any privileges, is he. Just make him a standard user account and keep Terminal restricted via Parental Controls, though if your brother is able to change credentials in Terminal, he can surely just log into your user via resetting its password.
Click to expand...


Which he's done before. Can I block him completely from terminal so he can't do that? -_-
 
Ego killer said:
I've made him a standard account before and his smartass has got into terminal i'm guessing and changed his account to an administrator..

any thoughts?
Click to expand...

He can't change his account type unless he knows your password. Make sure you have a good hard to guess password.
 
calderone said:
This won't be possible in a standard user account. It would require escalated privileges.




Lock down Terminal with Parental Controls. Use a firmware password to restrict booting to the DVD or single user mode.
Click to expand...

Okay sorry for my "noobness" How can I put parental controls on terminal? I can't find it. and How do I set up a firmware password?
 
Ego killer said:
Downloaded Firmware thingy: It says "the following disk images couldn't be opened - Reason: Legacy image should be converted"

-_-
Click to expand...

Firmware passwords are silly. Simply changing the ram size removes them. The only Mac that they actually do any good on is the Air. Which doesn't have upgradable ram.
 
Intell said:
Firmware passwords are silly. Simply changing the ram size removes them. The only Mac that they actually do any good on is the Air. Which doesn't have upgradable ram.
Click to expand...

If my brother buys me more ram to remove my firmware password, he's deserved its removal.

How do I add it?
 
Intell said:
Firmware passwords are silly. Simply changing the ram size removes them. The only Mac that they actually do any good on is the Air. Which doesn't have upgradable ram.
Click to expand...

Ram trick no longer works on post 2010 Macs.

http://support.apple.com/kb/TS3554


Ego killer said:
If my brother buys me more ram to remove my firmware password, he's deserved its removal.

How do I add it?
Click to expand...

You don't download the thing from the article. You boot to: Snow Leopard DVD or Recovery Partition.
 
calderone said:
This won't be possible in a standard user account. It would require escalated privileges.
Click to expand...
I understand, but what I meant is, while it might not be possible from inside a Standard account,
one can reset the password of an admin account with the help of an Install DVD for Mac OS X
or when one boots into Single User mode, which isn't that hard, if one understands Terminal enough to change a password
(I can't do that, though it is probably easy if one reads the man - btw, how do I exit the man pages when I come to the end - CTRL+C does not work, nor does ESC?),
or if one simply follows these, freely available steps.
 
Ego killer said:
If my brother buys me more ram to remove my firmware password, he's deserved its removal.

How do I add it?
Click to expand...

It doesn't need to be upgraded. Even if you take out one of the sticks, start it, put the one stick back it, it still removes it.

calderone said:
Ram trick no longer works on post 2010 Macs.
Click to expand...

Still does. Reset a firmware password the other day at work on a 2011 Mac Mini that way and my friend's 2011 Macbook Pro.

simsaladimbamba said:
btw, how do I exit the man pages when I come to the end - CTRL+C does not work, nor does ESC?
Click to expand...

Press Q.
 
simsaladimbamba said:
I understand, but what I meant is, while it might not be possible from inside a Standard account,
one can reset the password of an admin account with the help of an Install DVD for Mac OS X
or when one boots into Single User mode, which isn't that hard, if one understands Terminal enough to change a password
(I can't do that, though it is probably easy if one reads the man - btw, how do I exit the man pages when I come to the end - CTRL+C does not work, nor does ESC?),
or if one simply follows these, freely available steps.
Click to expand...


Which is why I recommended using a Firmware password, to restrict the ability to boot to anything other than the startup disk.

Press 'q' to quit a man page.
 
Intell said:
It doesn't need to be upgraded. Even if you take out one of the sticks, start it, put the one stick back it, it still removes it.



Still does. Reset a firmware password the other day at work on a 2011 Mac Mini that way and my friend's 2011 Macbook Pro.
Click to expand...

Doesn't work on my 2011 Pro or my 2011 Mini. According to Apple, you can't do it, I am going to take their word on this one.

Even so, if this kid is willing to circumvent these things by opening the computer I think that should be addresses with his parents.
 
calderone said:
Doesn't work on my 2011 Pro or my 2011 Mini. According to Apple, you can't do it, I am going to take their word on this one.
Click to expand...

Source? Can't say anything about your Macs, but it works and has worked just fine on all the latest and greatest Apple Macs. Even the late 2011 MBP.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back