Protect Physical Console Access

$ tmux

ctrl+b :lock-session

set -g lock-command vlock

ctrl+b :lock-session

bind X lock-session

Ctrl+b Shift+x

$ sudo yum install kbd

$ sudo yum install opensc

$ sudo yum install pcsc-lite

$ sudo yum install openssl-pkcs11

$ sudo systemctl enable pcscd.service

app default {
   ...
   card_drivers = ;
}

# force_card_driver = customcos;

force_card_driver = ;

cert_policy = ca, ocsp_on, signature;