The console user is also allowed access to certain programs with a file bearing the command name in the /etc/security/console.apps/ directory.

One notable group of applications the console user has access to are three programs which shut off or reboot the system. These are:

Because these are PAM-aware applications, they call the pam_console.so module as a requirement for use.

For more information, refer to the Section 16.8.1, “Installed Documentation”.