I'm curious why any user logged in at the console can issue the 'reboot' command and reboot the system. I've tested/verified this to work, and read some older posts about this. If it were a bug, I suspect it would be fixed by now. Also, if a user is logged into the console, and then logs in via ssh from another system, that user can also reboot the system from that ssh connection. It would seem that once a user authenticates on the console, and remains on the console, they can reboot from any other/new tty. Once they drop off the console, the ssh connections can no longer reboot.
If this is by design, why?
Thanks!
Regards, Joseph Spenner
---
If life gives you lemons, keep them-- because hey.. free lemons. "~heart~ Sticker" fixer: http://microflush.org/stuff/stickers/heartFix.html
On May 5, 2013 6:39 AM, "Joseph Spenner" joseph85750@yahoo.com wrote:
I'm curious why any user logged in at the console can issue the 'reboot'
command and reboot the system. I've tested/verified this to work, and read some older posts about this. If it were a bug, I suspect it would be fixed by now.
Also, if a user is logged into the console, and then logs in via ssh from
another system, that user can also reboot the system from that ssh connection. It would seem that once a user authenticates on the console, and remains on the console, they can reboot from any other/new tty. Once they drop off the console, the ssh connections can no longer reboot.
If this is by design, why?
Thanks!
"Consolekit"
Users with physical acces have higher capabilities in software because, well, physical access is root access.
Also, that configuration works better for workstation installations; imagine if a user couldn't shut down their laptop safely because they didn't have admin privileges on the system.
(Sorry for brief response; sending from phone.)
How are you rebooting? What groups are you in? From the command line? When I try this on Ubuntu (don't have a RHEL/CentOS here) I get "Have to be root" if I issue the /sbin/reboot command as an ordinary user.
Cheers,
Cliff
On Sun, May 5, 2013 at 10:38 PM, Joseph Spenner joseph85750@yahoo.comwrote:
I'm curious why any user logged in at the console can issue the 'reboot' command and reboot the system. I've tested/verified this to work, and read some older posts about this. If it were a bug, I suspect it would be fixed by now. Also, if a user is logged into the console, and then logs in via ssh from another system, that user can also reboot the system from that ssh connection. It would seem that once a user authenticates on the console, and remains on the console, they can reboot from any other/new tty. Once they drop off the console, the ssh connections can no longer reboot.
If this is by design, why?
Thanks!
Regards, Joseph Spenner
If life gives you lemons, keep them-- because hey.. free lemons. "~heart~ Sticker" fixer: http://microflush.org/stuff/stickers/heartFix.html _______________________________________________ CentOS mailing list CentOS@centos.org http://lists.centos.org/mailman/listinfo/centos
On Mon, May 06, 2013 at 08:20:31AM +1200, Cliff Pratt wrote:
How are you rebooting? What groups are you in? From the command line? When I try this on Ubuntu (don't have a RHEL/CentOS here) I get "Have to be root" if I issue the /sbin/reboot command as an ordinary user.
Cheers,
Cliff
Please try not to top post.
Ubuntu and Debian require authorization to reboot. RedHat based distributions don't under various circumstances.
I don't know what most other distributions do, the BSDs don't allow it, nor does ArchLinux.
Whether it's something that's always been this way or just one more Fedora-ism aimed at the person fleeing Windows that made its way into RH, I have no idea.
On Mon, May 6, 2013 at 8:31 AM, Scott Robbins scottro@nyc.rr.com wrote:
On Mon, May 06, 2013 at 08:20:31AM +1200, Cliff Pratt wrote:
Please try not to top post.
Sorry, I blame GMail, which hides the previous quoted posts under an
ellipsis.
Cheers,
Cliff
Cliff Pratt <enkiduonthenet@...> writes:
How are you rebooting? What groups are you in? From the command line? When I try this on Ubuntu (don't have a RHEL/CentOS here) I get "Have to be root" if I issue the /sbin/reboot command as an ordinary user.
Cheers,
<SNIP> Odd combination of systems to check right now but:
1) Fedora 18 (Xfce respin) VM console: Applications -> Logout -> Shutdown
2) Fedora 18 (Xfce respin) VNC session to native install: Above combination is greyed out. I can only logout. But if I go to the physical system and log in, I get the ability to shut it down.
3) Scientific Linux 6.4 console (roughly equivalent to CentOS 6.4): Applications -> Logout -> Shutdown
4) All of the above: CTRL-ALT-DEL key press although I have to send the key combination to the VM through the KVM GUI.
5) Power button or reset button.
6) Power cord.
The last two options are why someone with physical access also has the ability to shutdown a system. Also, I run Linux on my laptop and would find it very annoying not to be able to shutdown the system when I need to.
Cheers, Dave
-
Cliff Pratt -
David G. Miller -
Joseph Spenner -
Michael Mol -
Scott Robbins