Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 23 Feb 2001 09:34:37 +0300
From:      Odhiambo Washington <wash@iconnect.co.ke>
To:        freebsd-questions@freebsd.org
Cc:        jessie@power-jessie.net
Subject:   Re: authorized shutdown
Message-ID:  <20010223093437.B64643@poeza.iconnect.co.ke>
In-Reply-To: <NEBBJJKPMLNMNBFHAAFIIEPHCCAA.jessie@power-jessie.net>;  from "Power JeSsIe!" on Fri, Feb 23, 2001 at 11:54:41AM -0800
References:  <NEBBJJKPMLNMNBFHAAFIOEPFCCAA.jessie@power-jessie.net> <NEBBJJKPMLNMNBFHAAFIIEPHCCAA.jessie@power-jessie.net>

next in thread | previous in thread | raw e-mail | index | archive | help

--2B/JsCI69OhZNC5r
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* Power JeSsIe! <jessie@power-jessie.net> [20010223 06:44]: writing on the =
subject 'RE: authorized shutdown'
Power>=20
Power> this may sound a newbie question but i just wanna know
Power> How can i limit the 'shutdown' command=20
Power> (and the pressing of 'ctrl-alt-del' keys as well )
Power> to authorized users only?

If you add this option to the kernel config file and recompile, it will
make CTRL+ALT+DEL a gone case, so noone, even you as root, will ever reset
the system with those keys.

options         SC_DISABLE_REBOOT       #Disable reboot by CTRL+ALT+DEL

For the shutdown, it should not work for any user, unless you have given
them that ability to do that in 'sudo' - please think about sudo, it is in
the ports tree -- /usr/ports/security/sudo=20

/usr/local/etc/sudoers is the file to grant such privileges but you just
don't edit it using any other text editor. You must use the command
'visudo' as root to edit.

HTH

-Wash

--
Odhiambo Washington  Inter-Connect Ltd.,
wash@iconnect.co.ke  5th Flr Furaha Plaza
Tel: 254 11 222604   Nkrumah Rd.,
Fax: 254 11 222636   PO Box 83613 MOMBASA, KE.

What a person believes is not as important as how a person believes. -Timot=
hy=20
Virkkala=20

--2B/JsCI69OhZNC5r
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6lgR9A2k+MNyI/bERAjOlAKCDQR/wjY/PKuS4QDMvwQNZI3tDogCeL9J7
pHN6WH6drTBfUMhkyCDSlkI=
=jyp3
-----END PGP SIGNATURE-----

--2B/JsCI69OhZNC5r--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010223093437.B64643>