Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 11 Oct 2001 12:01:55 +1000
From:      Edwin Groothuis <edwin@mavetju.org>
To:        Scott Gerhardt <scott@gerhardt-it.com>
Cc:        FreeBSD <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Deny shutdown
Message-ID:  <20011011120155.C2865@k7.mavetju.org>
In-Reply-To: <KPEMLBLEMPMHGLJOCDEGEEIGCJAA.scott@gerhardt-it.com>; from scott@gerhardt-it.com on Wed, Oct 10, 2001 at 05:05:09PM -0600
References:  <KPEMLBLEMPMHGLJOCDEGEEIGCJAA.scott@gerhardt-it.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Oct 10, 2001 at 05:05:09PM -0600, Scott Gerhardt wrote:
> I would like to configure FreeBSD to disallow the following shutdown related
> commands from all but the local console:

Isn't this more an organisation problem than a operational problem?
I mean, only the root user and the operator group can do these
things. The easiest way (...) is to write a wrapper around it which
checks these preconditions and then calls shutdown-thisistherealexecutable.

It doesn't prevent people from calling shutdown-thisistherealexecutable,
but it will prevent the obvious mistakes.

Edwin

-- 
Edwin Groothuis   |              Personal website: http://www.MavEtJu.org
edwin@mavetju.org |           Interested in MUDs? Visit Fatal Dimensions:
------------------+                       http://www.FatalDimensions.org/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011011120155.C2865>