Re: [6.5] Xfce: problem with shutdown menu

2019-04-28 Thread chohag
Theo de Raadt writes:
> "Stephane HUC \"PengouinBSD\""  wrote:
>
> > Hi, Tom. Ty for your reply.
> > 
> > On my file /etc/doas.conf, i've only one line, as:
> > 
> > "permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel"
^

> So a javascript exploit in your browser can perform a rm -rf.

... everywhere.

Matthew



Re: [6.5] Xfce: problem with shutdown menu

2019-04-28 Thread Theo de Raadt
"Stephane HUC \"PengouinBSD\""  wrote:

> Hi, Tom. Ty for your reply.
> 
> On my file /etc/doas.conf, i've only one line, as:
> 
> "permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel"

So a javascript exploit in your browser can perform a rm -rf.

Cool.



Re: [6.5] Xfce: problem with shutdown menu

2019-04-28 Thread Stephane HUC "PengouinBSD"


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512


Hi, Tom. Ty for your reply.

On my file /etc/doas.conf, i've only one line, as:

"permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel"

And, my userinfo:

(...)
groups    *** wheel operator wsrc _saned
(...)


On 4/28/19 11:09 PM, Tom Smyth wrote:
> Hi Stephane > > I would imagine it is because you dont have shutdown 
> privilege as
the > user in Xfce, > > check your doas config ... > > BTW i was just
lazy and opened a privleged shell and ran halt -p > > > > > On Sun, 28
Apr 2019 at 22:05, Stephane HUC "PengouinBSD" > 
wrote: >> > Hi, (just FYI) > > After upgrading OpenBSD from 6.4 to 6.5,
I cant anymore to stop my > machine when I click on menu shutdown into
Xfce session. > The result is a logout, and not shutdown. > > As see,
the reply by Landry to one user, on forum "Daemons - BSD", it > seems
necessary to add the id user at the group operator. > I try this
solution, log me out, and login new... and the menu run > correctly! > >
http://daemonforums.org/showthread.php?t=10971#post66453 > > >> > > - --
~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD "    +=<<<
- 
Stephane HUC as PengouinBSD or CIOTBSD
b...@stephane-huc.net
-BEGIN PGP SIGNATURE-

iHUEARYKAB0WIQScTRXz7kMlZfGpDZMTq98t3AMG7wUCXMYYWwAKCRATq98t3AMG
72ksAP4/elW7kNVyJ1H8UF2HpmPaFvUpzw/zV/TCHZ6ProMoLgEAkNDObtHrHGrs
zLHNSLU944CForBJoU197/TzhkQFIAk=
=7kjS
-END PGP SIGNATURE-



Re: [6.5] Xfce: problem with shutdown menu

2019-04-28 Thread Ingo Schwarze
Hi Tom,

Tom Smyth wrote on Sun, Apr 28, 2019 at 10:09:54PM +0100:

> I would imagine it is because you dont have shutdown privilege as the
> user in Xfce,
> 
> check your doas config ...
> 
> BTW i was just lazy and opened a privleged shell and ran halt -p

i wouldn't call that "lazy" but rather "best practice".

Configuring a GUI to do privileged operations would seem pointless
to me: both complicated and risky.

Yours,
  Ingo



Re: [6.5] Xfce: problem with shutdown menu

2019-04-28 Thread Tom Smyth
Hi Stephane

I would imagine it is because you dont have shutdown privilege as the
user in Xfce,

check your doas config ...

BTW i was just lazy and opened a privleged shell and ran halt -p




On Sun, 28 Apr 2019 at 22:05, Stephane HUC "PengouinBSD"
 wrote:
>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA512
>
> Hi, (just FYI)
>
> After upgrading OpenBSD from 6.4 to 6.5, I cant anymore to stop my
> machine when I click on menu shutdown into Xfce session.
> The result is a logout, and not shutdown.
>
> As see, the reply by Landry to one user, on forum "Daemons - BSD", it
> seems necessary to add the id user at the group operator.
> I try this solution, log me out, and login new... and the menu run
> correctly!
>
> http://daemonforums.org/showthread.php?t=10971#post66453
>
>
> - --
> ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<<
> - 
> Stephane HUC as PengouinBSD or CIOTBSD
> b...@stephane-huc.net
> -BEGIN PGP SIGNATURE-
>
> iHUEARYKAB0WIQScTRXz7kMlZfGpDZMTq98t3AMG7wUCXMYS4QAKCRATq98t3AMG
> 7yGlAQCt0p1qRZD/Szt0Yw4sli9RaIu/2LLwfZOQ6zMK1uleUwEAyeBxvoV2onST
> Q0qLG5L7nAGxZJEJl7r1pKkYzAfL7Ak=
> =BQ3J
> -END PGP SIGNATURE-
>


-- 
Kindest regards,
Tom Smyth.



[6.5] Xfce: problem with shutdown menu

2019-04-28 Thread Stephane HUC "PengouinBSD"
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi, (just FYI)

After upgrading OpenBSD from 6.4 to 6.5, I cant anymore to stop my
machine when I click on menu shutdown into Xfce session.
The result is a logout, and not shutdown.

As see, the reply by Landry to one user, on forum "Daemons - BSD", it
seems necessary to add the id user at the group operator.
I try this solution, log me out, and login new... and the menu run
correctly!

http://daemonforums.org/showthread.php?t=10971#post66453


- -- 
~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<<
- 
Stephane HUC as PengouinBSD or CIOTBSD
b...@stephane-huc.net
-BEGIN PGP SIGNATURE-

iHUEARYKAB0WIQScTRXz7kMlZfGpDZMTq98t3AMG7wUCXMYS4QAKCRATq98t3AMG
7yGlAQCt0p1qRZD/Szt0Yw4sli9RaIu/2LLwfZOQ6zMK1uleUwEAyeBxvoV2onST
Q0qLG5L7nAGxZJEJl7r1pKkYzAfL7Ak=
=BQ3J
-END PGP SIGNATURE-