Disable reboot/halt/shutdown as normal user

carstenbjensen · 09-09-2003, 09:07 AM

Mandrake makes it possible to reboot/halt/shutdown the system as normal user, by default!
This is not a good thing, therefore I really would like to disable it, but I can't figure out, how Mandrake did it... can anybody help?

I have played with it, and it dosn't seem to be setUID root, but I can be wrong.
The only solution I have right now is to chmod a-x /sbin/halt, etc. But this is not a good solution, because then root can't do it either.

I hope someone has the answer I need.

Peace!
Carsten B. Jensen

Oddball79 · 09-09-2003, 09:32 AM

have you tried removing your users from the group that these commands belong to? (that word after root when you run ls -l [filename])

jpbarto · 09-09-2003, 09:36 AM

'chmod 0500 /sbin/shutdown'

this should set a file like /sbin/shutdown to have permissions of
r-x------ and remove its suid... I think /sbin/halt is just a symbolic link to /sbin/shutdown isn't it?

jpbarto

carstenbjensen · 09-09-2003, 11:36 AM

Quote:

Originally posted by jpbarto
'chmod 0500 /sbin/shutdown'

this should set a file like /sbin/shutdown to have permissions of
r-x------ and remove its suid...

Thanks! Now it works like it should.

Peace!
Carsten B. Jensen

jpbarto · 09-09-2003, 11:42 AM

no problem,
jpbarto