On Sat, 18 Mar 2000, Philip S Tellis wrote:

> I have to be root to run shutdown and halt.  If I run it as any other
> user, it asks for a password.  I assume this is the root password, and
> type it in.  It waits for 1 second and returns to the shell prompt.  No

Just a little addition.  If I use /sbin/halt, it works.  /usr/bin/halt
points to something called consolehelper.

consolehelper - A wrapper that helps console users run system programs

consolehelper in turn uses userhelper (which has the .. in the path
security hole).

Anyway, consolehelper checks /etc/pam.d/ for a file with the name of the
command.  In this case that is halt:

auth       sufficient   /lib/security/pam_rootok.so
auth       required     /lib/security/pam_console.so
auth       required     /lib/security/pam_pwdb.so
account    required     /lib/security/pam_permit.so

What do these things mean?  I know that the .so files are basically
compiled c programs that need to be linked in to something, but what do
each of them do?

Philip

--
Without freedom of choice there is no creativity.
                -- Kirk, "The return of the Archons", stardate 3157.4



To subscribe / unsubscribe goto the site www.ilug-bom.org ., click on the mailing list 
button and fill the appropriate information 
and submit. For any other queries contact the ML maintener

Reply via email to