From owner-freebsd-questions Wed Nov 11 10:17:59 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA15709 for freebsd-questions-outgoing; Wed, 11 Nov 1998 10:17:59 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from scientia.demon.co.uk (scientia.demon.co.uk [212.228.14.13]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id KAA15697 for ; Wed, 11 Nov 1998 10:17:51 -0800 (PST) (envelope-from ben@scientia.demon.co.uk) Received: from ben by scientia.demon.co.uk with local (Exim 2.053-bcps #6) id 0zddZE-0005eg-00; Wed, 11 Nov 1998 16:56:28 +0000 Date: Wed, 11 Nov 1998 16:56:28 +0000 From: Ben Smithurst To: Tolpin Vladimir Cc: freebsd-questions@FreeBSD.ORG Subject: Re: Shutdown Message-ID: <19981111165628.B21706@scientia.demon.co.uk> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii In-Reply-To: User-Agent: Mutt/0.94.12i (FreeBSD/3.0-CURRENT) Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Tolpin Vladimir wrote: > We have server witch "on" only when someone at work, but the last one > who leave room must down it, but only I have root password and other > have only users account and password to 'on' system . Please explane > me how common user can down server without root password. An ugly way would be to have them press ctrl+alt+del, and turn it off after FreeBSD has shutdown, but before it starts up again. There have been two other suggestions already, one of them must be useable... You could also make /sbin/halt setuid root, which may work (`chmod 4555 /sbin/halt'). Don't let anyone use /sbin/shutdown, since they will be able to get a root prompt that way. I don't think they can with /sbin/halt. (Well, they could then reboot and boot up with -s to get single-user mode. I think making console insecure in /etc/ttys make solve this, since they will need to enter root's password.) I may be talking shit as well, but it may be useful... -- Ben Smithurst ben@scientia.demon.co.uk send a blank message to ben+pgp@scientia.demon.co.uk for PGP key To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message