[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: A reboot user



On Fri, Apr 30, 2004 at 01:46:11PM +0100, neil wrote:
> >Try creating a passwd entry with a uid and gid of '0' (same as root) and 
> >set the path for the shell to be a program which simply calls shutdown 
> >with the relevent parameters.
> >The program will be run when the user logs in, and the user will be logged 
> >out again as soon as the program exits.
> >(Not tried it though)
> IMHO it would be safer, cleaner and more practical - if you have no ssh 
> access - to create a non priviledged user that can 'sudo reboot'. If you 
> take a few minutes to read through the sudo man pages you'll find it can 
> be a very useful tool indeed.

Neither of these should be necessary -- the default consolehelper/PAM
configuration for 'reboot' is such that any user with console access can run
reboot without further authentication. (For this exact reason, in fact -- no
sense in denying clean reboots to someone who can probably just pull the
plug.)


-- 
Matthew Miller           mattdm mattdm org        <http://www.mattdm.org/>
Boston University Linux      ------>                <http://linux.bu.edu/>



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]