Re: [6.5] Xfce: problem with shutdown menu
Theo de Raadt writes:
> "Stephane HUC \"PengouinBSD\"" wrote:
>
> > Hi, Tom. Ty for your reply.
> >
> > On my file /etc/doas.conf, i've only one line, as:
> >
> > "permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel"
^
> So a javascript exploit in your browser can perform a rm -rf.
... everywhere.
Matthew
Re: [6.5] Xfce: problem with shutdown menu
"Stephane HUC \"PengouinBSD\"" wrote:
> Hi, Tom. Ty for your reply.
>
> On my file /etc/doas.conf, i've only one line, as:
>
> "permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel"
So a javascript exploit in your browser can perform a rm -rf.
Cool.
Re: [6.5] Xfce: problem with shutdown menu
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512
Hi, Tom. Ty for your reply.
On my file /etc/doas.conf, i've only one line, as:
"permit nopass setenv { ENV PS1 SSH_AUTH_SOCK } :wheel"
And, my userinfo:
(...)
groups *** wheel operator wsrc _saned
(...)
On 4/28/19 11:09 PM, Tom Smyth wrote:
> Hi Stephane > > I would imagine it is because you dont have shutdown
> privilege as
the > user in Xfce, > > check your doas config ... > > BTW i was just
lazy and opened a privleged shell and ran halt -p > > > > > On Sun, 28
Apr 2019 at 22:05, Stephane HUC "PengouinBSD" >
wrote: >> > Hi, (just FYI) > > After upgrading OpenBSD from 6.4 to 6.5,
I cant anymore to stop my > machine when I click on menu shutdown into
Xfce session. > The result is a logout, and not shutdown. > > As see,
the reply by Landry to one user, on forum "Daemons - BSD", it > seems
necessary to add the id user at the group operator. > I try this
solution, log me out, and login new... and the menu run > correctly! > >
http://daemonforums.org/showthread.php?t=10971#post66453 > > >> > > - --
~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<<
-
Stephane HUC as PengouinBSD or CIOTBSD
b...@stephane-huc.net
-BEGIN PGP SIGNATURE-
iHUEARYKAB0WIQScTRXz7kMlZfGpDZMTq98t3AMG7wUCXMYYWwAKCRATq98t3AMG
72ksAP4/elW7kNVyJ1H8UF2HpmPaFvUpzw/zV/TCHZ6ProMoLgEAkNDObtHrHGrs
zLHNSLU944CForBJoU197/TzhkQFIAk=
=7kjS
-END PGP SIGNATURE-
Re: [6.5] Xfce: problem with shutdown menu
Hi Tom, Tom Smyth wrote on Sun, Apr 28, 2019 at 10:09:54PM +0100: > I would imagine it is because you dont have shutdown privilege as the > user in Xfce, > > check your doas config ... > > BTW i was just lazy and opened a privleged shell and ran halt -p i wouldn't call that "lazy" but rather "best practice". Configuring a GUI to do privileged operations would seem pointless to me: both complicated and risky. Yours, Ingo
Re: [6.5] Xfce: problem with shutdown menu
Hi Stephane I would imagine it is because you dont have shutdown privilege as the user in Xfce, check your doas config ... BTW i was just lazy and opened a privleged shell and ran halt -p On Sun, 28 Apr 2019 at 22:05, Stephane HUC "PengouinBSD" wrote: > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA512 > > Hi, (just FYI) > > After upgrading OpenBSD from 6.4 to 6.5, I cant anymore to stop my > machine when I click on menu shutdown into Xfce session. > The result is a logout, and not shutdown. > > As see, the reply by Landry to one user, on forum "Daemons - BSD", it > seems necessary to add the id user at the group operator. > I try this solution, log me out, and login new... and the menu run > correctly! > > http://daemonforums.org/showthread.php?t=10971#post66453 > > > - -- > ~ " Fully Basic System Distinguish Life! " ~ " Libre as a BSD " +=<<< > - > Stephane HUC as PengouinBSD or CIOTBSD > b...@stephane-huc.net > -BEGIN PGP SIGNATURE- > > iHUEARYKAB0WIQScTRXz7kMlZfGpDZMTq98t3AMG7wUCXMYS4QAKCRATq98t3AMG > 7yGlAQCt0p1qRZD/Szt0Yw4sli9RaIu/2LLwfZOQ6zMK1uleUwEAyeBxvoV2onST > Q0qLG5L7nAGxZJEJl7r1pKkYzAfL7Ak= > =BQ3J > -END PGP SIGNATURE- > -- Kindest regards, Tom Smyth.
