Re: [6.5] Xfce: problem with shutdown menu
Theo de Raadt writes: > "Stephane HUC \"PengouinBSD\"" wrote: > > > Hi, Tom. Ty for your reply. > > > > On my file /etc/doas.conf, i've only one line, as: > > > > "permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel" ^ > So a javascript exploit in your browser can perform a rm -rf. ... everywhere. Matthew
Re: [6.5] Xfce: problem with shutdown menu
"Stephane HUC \"PengouinBSD\"" wrote: > Hi, Tom. Ty for your reply. > > On my file /etc/doas.conf, i've only one line, as: > > "permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel" So a javascript exploit in your browser can perform a rm -rf. Cool.
Re: [6.5] Xfce: problem with shutdown menu
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, Tom. Ty for your reply. On my file /etc/doas.conf, i've only one line, as: "permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel" And, my userinfo: (...) groups *** wheel operator wsrc _saned (...) On 4/28/19 11:09 PM, Tom Smyth wrote: > Hi Stephane > > I would imagine it is because you dont have shutdown > privilege as the > user in Xfce, > > check your doas config ... > > BTW i was just lazy and opened a privleged shell and ran halt -p > > > > > On Sun, 28 Apr 2019 at 22:05, Stephane HUC "PengouinBSD" > wrote: >> > Hi, (just FYI) > > After upgrading OpenBSD from 6.4 to 6.5, I cant anymore to stop my > machine when I click on menu shutdown into Xfce session. > The result is a logout, and not shutdown. > > As see, the reply by Landry to one user, on forum "Daemons - BSD", it > seems necessary to add the id user at the group operator. > I try this solution, log me out, and login new... and the menu run > correctly! > > http://daemonforums.org/showthread.php?t=10971#post66453 > > >> > > - -- ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<< - Stephane HUC as PengouinBSD or CIOTBSD b...@stephane-huc.net -BEGIN PGP SIGNATURE- iHUEARYKAB0WIQScTRXz7kMlZfGpDZMTq98t3AMG7wUCXMYYWwAKCRATq98t3AMG 72ksAP4/elW7kNVyJ1H8UF2HpmPaFvUpzw/zV/TCHZ6ProMoLgEAkNDObtHrHGrs zLHNSLU944CForBJoU197/TzhkQFIAk= =7kjS -END PGP SIGNATURE-
Re: [6.5] Xfce: problem with shutdown menu
Hi Tom, Tom Smyth wrote on Sun, Apr 28, 2019 at 10:09:54PM +0100: > I would imagine it is because you dont have shutdown privilege as the > user in Xfce, > > check your doas config ... > > BTW i was just lazy and opened a privleged shell and ran halt -p i wouldn't call that "lazy" but rather "best practice". Configuring a GUI to do privileged operations would seem pointless to me: both complicated and risky. Yours, Ingo
Re: [6.5] Xfce: problem with shutdown menu
Hi Stephane I would imagine it is because you dont have shutdown privilege as the user in Xfce, check your doas config ... BTW i was just lazy and opened a privleged shell and ran halt -p On Sun, 28 Apr 2019 at 22:05, Stephane HUC "PengouinBSD" wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi, (just FYI) > > After upgrading OpenBSD from 6.4 to 6.5, I cant anymore to stop my > machine when I click on menu shutdown into Xfce session. > The result is a logout, and not shutdown. > > As see, the reply by Landry to one user, on forum "Daemons - BSD", it > seems necessary to add the id user at the group operator. > I try this solution, log me out, and login new... and the menu run > correctly! > > http://daemonforums.org/showthread.php?t=10971#post66453 > > > - -- > ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<< > - > Stephane HUC as PengouinBSD or CIOTBSD > b...@stephane-huc.net > -BEGIN PGP SIGNATURE- > > iHUEARYKAB0WIQScTRXz7kMlZfGpDZMTq98t3AMG7wUCXMYS4QAKCRATq98t3AMG > 7yGlAQCt0p1qRZD/Szt0Yw4sli9RaIu/2LLwfZOQ6zMK1uleUwEAyeBxvoV2onST > Q0qLG5L7nAGxZJEJl7r1pKkYzAfL7Ak= > =BQ3J > -END PGP SIGNATURE- > -- Kindest regards, Tom Smyth.