Package: molly-guard
Version: 0.2.2-1
Severity: grave
Justification: renders package unusable

The typical command I use to shutdown a computer is:

        shutdown -h now

I've been doing this for a long time (possibly pre-linux), and it's the
command string that my fingers remember automatically.

This morning my son was being obnoxious and was not getting ready to go
out, rather he was playing on his computer.  I ssh'ed into his computer
and typed "shutdown -h now" to shut it down.

Except that I accidentally *really* ssh'd into my server, at a hosting
center 30 km away, and shut it down.  For real.  Requiring me to drive
all over town to get keys and cards and get into the hosting center and
press the 'On' button.

I actually had molly-guard installed on the computer in question, and I
understood this was *exactly* the kind of scenario that molly-guard is
intended to protect against.  So I can't understand *why* molly-guard
fails to intercept the "-h" option (i.e. "halt") to shutdown except to
reason that someone has a mistaken belief that this is the "help" option.

As a result, I am marking this grave :-)

The fix is trivial, of course.  If possible it would be nice to see the
fix in Etch r1 also.

Thanks,
                                Andrew McMillan.

PS.  It's a great idea.  In fact when my son (the one whose computer I
was actually trying to shut downi here) was about 14 months old he was
caught repeatedly pressing the "On/Off" switch on a client's server
that he shouldn't have had access too, much like the original Molly.

-- System Information:
Debian Release: lenny/sid
  APT prefers unstable
  APT policy: (690, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.22-rc2-hippy (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=POSIX (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/bash

Versions of packages molly-guard depends on:
ii  sysvinit                     2.86.ds1-38 System-V-like init utilities

molly-guard recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to