Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 30 May 2000 13:07:58 -0400
From:      Nathan Vidican <webmaster@wmptl.com>
To:        Nils Holland <nils@nightcastleproductions.org>
Cc:        questions@freebsd.org
Subject:   Re: Letting normal users halt the system
Message-ID:  <3933F56E.82B51937@wmptl.com>
References:  <Pine.BSF.4.21.0005301857570.297-100000@tempest.ncptiddische.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Nils Holland wrote:
> 
> On Tue, 30 May 2000, Nathan Vidican wrote:
> 
> > Place the user(s) you want to be able to halt/shutdown the system into
> > the 'operator' group; this will allow them tu run 'shutdown -h now' to
> > halt, and 'shutdown -r now' to reboot. (This will only work assuming the
> > default chown of root.operator to /sbin/shutdown).
> 
> This seems to achieve exactly what I wanted. But is it safe? I wonder of
> people in the "operator" group have any other rights besides halting and
> rebooting. This would, of course, be not what I wanted.
> 
> Any information about that would be great.
> 
> Thanks for your help,
> Nils

Alternately then, you could create a new group, (eg shutusers), and
re-chown /sbin/shutdown to root:shutusers, then chmod 750. Note that
while placing them in the operator group allows them to run the
shutdown, it does not allow them to explicitly use 'reboot' or 'halt',
but rather 'shutdown -h now' and 'shutdown -r now'.
	I am assuming that these are workstation machines you want the users to
be able to shutdown/reboot no? Why not try using some utility like kdm,
(KDE's X-Windows login app), as a replacement for Login: ?


-- 
Nathan Vidican
webmaster@wmptl.com
Windsor Match Plate & Tool Ltd.
http://www.wmptl.com/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3933F56E.82B51937>