Date: Wed, 18 Jul 2001 19:47:50 -0400 From: User & Ian Patrick Thomas <ipthomas_77@yahoo.com> To: Thomas Stratmann <thomas.stratmann@ruhr-uni-bochum.de> Cc: freebsd-questions@freebsd.org Subject: Re: shutdown group Message-ID: <20010718194750.E51074@localhost> In-Reply-To: <3B55B7B8.26500790@ruhr-uni-bochum.de>; from thomas.stratmann@ruhr-uni-bochum.de on Wed, Jul 18, 2001 at 06:22:16PM %2B0200 References: <3B55B7B8.26500790@ruhr-uni-bochum.de>
next in thread | previous in thread | raw e-mail | index | archive | help
sudo is the way to go. I'll give you the way I have this setup as an example in my sudoers file. Host_Alias LOCALHOST=your hostname -s here Cmnd_Alias SHUTDOWN=/sbin/shutdown username LOCALHOST = SHUTDOWN This should do it. Ian As it was put forth by Thomas Stratmann on Wed, Jul 18, 2001 at 06:22:16PM +0200... > Hi folks, > > I would like to have a group of people on my machine being able to > reboot/halt/shutdown without having to su root. The only solution I have > seen before is to chgrp the executables halt and reboot into this group > and making them suid (both check for EUID being zero, I believe, so the > second step seems necessary). > > I would like you to advise me > - if there is a better solution > - what security issues will give me trouble with the above way (SUID > always rings alarm bells for me...) > > Thanks in advance! > Thomas Stratmann > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010718194750.E51074>