Le 21/07/2016 04:15, Adam Borowski a écrit :
On Wed, Jul 20, 2016 at 06:27:25PM -0700, Rick Moen wrote:
Quoting Didier Kryn ([email protected]):
In any case, any person who has the possibility to push the
power button or cut the power cord should be given the opportunity
to click the halt button instead. ctrl-alt-f1+ctrl-alt-del can  be
used to reboot, but there's nothing to halt.
Halt is accomplished by first doing ctrl-alt-f1, ctrl-alt-del, then
turning the system unit off before significantly into startup (assuming
physical access to the system unit in addition to a physical console).

Or, as you say, through a hardware button on the system unit, or yanking
the mains (AC) cord.
Which means the defaults for display managers are bogus.

In the default configuration, anyone with physical access can ctrl-alt-del
or alt-sysrq.  This can be disabled, so can be a brief push of the power
button (ACPI shutdown), but I have yet to see a BIOS that allows disabling
long push of the power button, or, for that matter, yanking the power cord
(or the battery of a mobile device).
Long-push always worked for me. And short-push worked for me on Slim - I've now replaced Slim by Lightdm. Dunno what key "sysrq" is.
Thus, unless someone took extraordinary steps to provide physical security,
anyone able to login locally can turn the machine off, period.  An orderly
shutdown is better than an unclean one, thus any display manager that
forbids local users to shutdown is buggy.

I think anyone could agree on this. And this means "no authentication required."

    Didier

_______________________________________________
Dng mailing list
[email protected]
https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

Reply via email to