This sounds like a feasibly plan.  I will test it out and see what I can do
with it

Darcy

Simon Li wrote:

> Dear,
>
> The previously solution is nice.
>
> 1) Add a group which are designed to do only the shutdown job.
> 2) Add required user to the group.
> 3) Write a bash program and name it nicely, say, "shutdown" and write
> shutdown command in it. Place it a location where everyone's path includes
> me.
> 4) Grant the permission of your bash progam to the others (don't let them
> able to read or write, just permission to execution!)
>
> Solved?
>
> Yours,
> Simon.
> ----- Original Message -----
> From: "Tzafrir Cohen" <[EMAIL PROTECTED]>
> To: "Darcy Brodie" <[EMAIL PROTECTED]>
> Cc: "Mandrake expert list" <[EMAIL PROTECTED]>
> Sent: Wednesday, August 01, 2001 1:00 PM
> Subject: Re: [expert] allow non-root user to shutdown linux
>
> > On Tue, 31 Jul 2001, Darcy Brodie wrote:
> >
> > > Thanks for all the suggestions.  I did finally set the halt and shutdown
> > > commands to UID root, and that has solved my problems.
> >
> > I believe that you are over-trusting your local users. 'halt' and
> > 'shutdown' have a couple of dangerous switches (halt -f, shutdown -n,
> > shutdown -f, shutdown -F)
> >
> > Why exactly do you need users to shut down the system from the
> > command-line? Remote or local users?
> >
> > What's wrong with pressing ctrl-alt-del from the console?
> >
> > > > > >>>>>>On Saturday 02 June 2001 01:24 pm, Darcy Brodie wrote:
> > > > > >>>>>>>Hello
> > > > > >>>>>>>    I know that it isn't a good idea to give normal users
> root
> > > > > >>>>>>>access, but I need to set up a couple of Mandrake boxes (they
> will
> > > > > >>>>>>>only be in text mode, as these will be remote terminals to a
> Unix
> > > > > >>>>>>>network) so that a normal user can shut down without having
> to
> > > > > >>>>>>>login as root.  The process needs to be as simple as
> possible, to
> > > > > >>>>>>>prevent the user from messing it up
> >
> > --
> > Tzafrir Cohen
> > mailto:[EMAIL PROTECTED]
> > http://www.technion.ac.il/~tzafrir
> >
> >


Reply via email to