From owner-freebsd-questions Tue May 30 10: 8:23 2000 Delivered-To: freebsd-questions@freebsd.org Received: from mail2.wmptl.com (mail2.wmptl.com [216.221.73.131]) by hub.freebsd.org (Postfix) with ESMTP id 2F66237BDF1 for ; Tue, 30 May 2000 10:08:18 -0700 (PDT) (envelope-from webmaster@wmptl.com) Received: from wmptl.com ([10.0.0.168]) by mail2.wmptl.com (8.9.3/8.9.3) with ESMTP id NAA65703; Tue, 30 May 2000 13:14:39 -0400 (EDT) (envelope-from webmaster@wmptl.com) Message-ID: <3933F56E.82B51937@wmptl.com> Date: Tue, 30 May 2000 13:07:58 -0400 From: Nathan Vidican Reply-To: webmaster@wmptl.com X-Mailer: Mozilla 4.72 [en] (Win95; I) X-Accept-Language: en MIME-Version: 1.0 To: Nils Holland Cc: questions@freebsd.org Subject: Re: Letting normal users halt the system References: Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Nils Holland wrote: > > On Tue, 30 May 2000, Nathan Vidican wrote: > > > Place the user(s) you want to be able to halt/shutdown the system into > > the 'operator' group; this will allow them tu run 'shutdown -h now' to > > halt, and 'shutdown -r now' to reboot. (This will only work assuming the > > default chown of root.operator to /sbin/shutdown). > > This seems to achieve exactly what I wanted. But is it safe? I wonder of > people in the "operator" group have any other rights besides halting and > rebooting. This would, of course, be not what I wanted. > > Any information about that would be great. > > Thanks for your help, > Nils Alternately then, you could create a new group, (eg shutusers), and re-chown /sbin/shutdown to root:shutusers, then chmod 750. Note that while placing them in the operator group allows them to run the shutdown, it does not allow them to explicitly use 'reboot' or 'halt', but rather 'shutdown -h now' and 'shutdown -r now'. I am assuming that these are workstation machines you want the users to be able to shutdown/reboot no? Why not try using some utility like kdm, (KDE's X-Windows login app), as a replacement for Login: ? -- Nathan Vidican webmaster@wmptl.com Windsor Match Plate & Tool Ltd. http://www.wmptl.com/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message