Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 Feb 1999 10:25:06 +1000
From:      Greg Black <gjb@comkey.com.au>
To:        cjclark@home.com
Cc:        cchrstns@sdln.net (Corey A. Christians), questions@FreeBSD.ORG
Subject:   Re: Shutdown 
Message-ID:  <19990210002506.19212.qmail@alpha.comkey.com.au>
In-Reply-To: <199902091550.KAA05417@cc942873-a.ewndsr1.nj.home.com>  of Tue, 09 Feb 1999 10:50:41 EST
References:  <199902091550.KAA05417@cc942873-a.ewndsr1.nj.home.com> 

next in thread | previous in thread | raw e-mail | index | archive | help
> % ls -l `which shutdown`
> -r-sr-x---  1 root  operator  147456 Jul 22  1998 /sbin/shutdown
> 
> shutdown is a setuid command. It is simply a matter of using chmod to
> give other users access to it. To reboot the system,
> 
> % shutdown -r now

Here are some much saner solutions (in increasing order of
preference):

1. Add the users who are permitted to shut down the system in
   group operator.

2. If group operator doesn't suit for other reasons, create a
   new group "shutdown", chgrp shutdown /sbin/shutdown, and add
   your users to that group

3. Best of all, install sudo and put the people in your sudoers
   file, which allows you to give permissions to individuals,
   groups defined in various ways, with effect on various
   machines or networks, with or without passwords, etc, etc.
   The man pages describe this in great detail.

-- 
Greg Black <gjb@acm.org>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19990210002506.19212.qmail>