diff --git a/docs/auth.md b/docs/auth.md index 1c522556..c34ddd5b 100644 --- a/docs/auth.md +++ b/docs/auth.md @@ -8,12 +8,10 @@ It comes with the following default passwords: **These are two separate entities with independent accounts.** -Also there is another Linux special user: `kvmd-webterm`. +Also there is another special Linux user: `kvmd-webterm`. It can't be used for login or remote access to PiKVM OS and has the non-privileged rights in the OS. -Password access and `sudo` is disabled for it. It is used to launch the `Web Terminal` in the Web UI. - -The basic idea is that the Web UI user can access the OS at the level of a regular user, -but cannot control the core functions of PiKVM or break the OS. +Password access and `sudo` is disabled for it. It is used only for launching the `Web Terminal`. +These restrictions are set for security reasons. ----- @@ -30,6 +28,19 @@ To change the user to root in the `Web Terminal`, type `su -` and then enter the [root@pikvm kvmd-webterm]# ``` +!!! tip "Disabling the `Web Terminal`" + + Sometimes the actual owner of a PiKVM device and the user who is allowed to use it are different people. + So you may want to disable console access from the Web UI. To do this, use the following: + + ``` + [root@pikvm ~]# rw + [root@pikvm ~]# systemctl disable --now kvmd-webterm + [root@pikvm ~]# ro + ``` + + For your own access to PiKVM OS, you will still have SSH. + ----- ## Changing the Linux password diff --git a/docs/faq.md b/docs/faq.md index cca387b4..c1e9e32f 100644 --- a/docs/faq.md +++ b/docs/faq.md @@ -233,8 +233,6 @@ As a first step, we recommend carefully reading our documentation on [GitHub](ht # passwd ``` - Keep in mind that the more users that are added, the stream if accessed, fps will drop. - ??? question "How do I get root access in the web terminal?" The web terminal works with the account `kvmd-webterm`. This is a regular user with no administrator privileges. In addition, `sudo` and login are disabled for this user for security reasons. To get `root` access, you need to use the `su -` command (minus is important) and **enter the root password**.