who can halt your machine?  on mine, the answer is anyone!  this was a RH 
7.1 custom install.

a thread i found searching for an answer:

Search Result 6
From: Curt Hesher ([EMAIL PROTECTED])
Subject: halt
Newsgroups: comp.os.linux.redhat
View: (This is the only article in this thread) | Original Format
Date: 2001-05-23 15:08:02 PST


Does anyone have a clue why the default RedHat 7.1 installation makes
/sbin/halt world executable?  Is this normal?  Are there any other
commands like this in RedHat that should never be executable by anyone
but root, but are 755 perms?
Curt Hesher
[EMAIL PROTECTED]

////////////////////////////

does this concern anyone else but me?  no activity on this thread since may? 
  it's gotta be someplace else, but this is the first thing i found with the 
google.

it looks like PAM in now in charge of this ( man for details ) today was the 
first time i ever heard of such a thing.  i should keep up with RFCs more.

/etc/pam.c/halt is a pam config file, that has the check root perms 
commented out so, become root, edit the file, delete the comment and save.  
now generic user#1 can not halt the system.  this goes for reboot and 
poweroff too.

if you are the only user on your box, no worries.  if you are setting up 
accounts for other people on your box and you don't want them to be able to 
shut it off then you may want to look at your pam config files.

this actually makes sense if the default is set so that the root is the SA 
for a particular group that does not have root privileges.  i mean if you 
start installing systems all over the place and the users can't reboot, or 
turn off there computers, there will be a lot of bitchin' from the help 
desk.

cheers,
rob

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

Reply via email to