Ubuntu/debian: Is there a way to give permissions for users to use SHUTDOWN command?

frenchn00b · 01-05-2010, 11:00 PM

Hello,

Shutdown is for root only. But I would like to set a ubuntu box to give permissions for users to use SHUTDOWN command.

What is the modern way to do such operation?

I read that there is :

Quote:

adduser power yourusername

but actually I would like only the command : halt or shutdown now (if possible)
and

Quote:

adduser power yourusername

let certainly too much permissions for users that they can break the machine.

Quakeboy02 · 01-05-2010, 11:10 PM

It shouldn't be hard to add a rule to /etc/sudoers to allow all users to shut your system down. "man sudoers"

~sHyLoCk~ · 01-05-2010, 11:12 PM

Well I usually add to my sudoers:

Quote:

shy ALL=(ALL) NOPASSWD: /sbin/shutdown
shy ALL=(ALL) NOPASSWD:/sbin/reboot

This helps me since I use WMs.

frenchn00b · 01-05-2010, 11:22 PM

Quote:

Originally Posted by ~sHyLoCk~

Well I usually add to my sudoers:

This helps me since I use WMs.

Thank you !! I am gonna try the modern trick, and let you know. Sounds very good.

# cat sudoers

Code:

# /etc/sudoers
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the man page for details on how to write a sudoers file.
#

Defaults	env_reset

# Host alias specification

# User alias specification

# Cmnd alias specification

# User privilege specification
root	ALL=(ALL) ALL

# Uncomment to allow members of group sudo to not need a password
# (Note that later entries override this, so you might need to move
# it further down)
# %sudo ALL=NOPASSWD: ALL

shy ALL=(ALL) NOPASSWD:/sbin/shutdown
shy ALL=(ALL) NOPASSWD:/sbin/reboot

~sHyLoCk~ · 01-05-2010, 11:37 PM

Err... don't put shy that's my username, replace it with your username. :P

frenchn00b · 01-05-2010, 11:42 PM

Quote:

Originally Posted by ~sHyLoCk~

Err... don't put shy that's my username, replace it with your username. :P

I changed to correct user. thank you it was importnat to mention.

I wish you a pleasant day

frenchn00b · 01-13-2010, 10:05 AM

Code:

apt-get install sudo

Code:

frenchnoob ALL=(ALL) NOPASSWD: /sbin/shutdown

Code:

~$ /sbin/shutdown now
shutdown: you must be root to do that!

well I have to look what it is ...

MBybee · 01-13-2010, 10:10 AM

Quote:

Originally Posted by frenchn00b

Code:

apt-get install sudo

Code:

frenchnoob ALL=(ALL) NOPASSWD: /sbin/shutdown

Code:

~$ /sbin/shutdown now
shutdown: you must be root to do that!

well I have to look what it is ...

You need to invoke sudo to use sudo, so try this:

Code:

sudo shutdown now

See if that works. You can also use a wrapper script, setuid, alias, etc.

Alias might be the fastest and easiest.
http://webtools.live2support.com/linux/alias.php

Basically just set up an alias in your login script like so:

Code:

alias shutdown 'sudo shutdown -h now'

Then whenever you type 'shutdown', you'll get the desired reaction.

the trooper · 01-13-2010, 10:15 AM

As MBybee said you need to use sudo.
What window manager are you using?.
The reason i ask is because i do something very similar to shutdown/restart Fluxbox from a menu entry.

frenchn00b · 01-13-2010, 10:44 AM

Quote:

Originally Posted by the trooper

As MBybee said you need to use sudo.
What window manager are you using?.
The reason i ask is because i do something very similar to shutdown/restart Fluxbox from a menu entry.

found at the same time: http://linux.byexamples.com/archives...sudo-password/

I added sudo before : and it works
above I placed a link how to make it without sudo :

Code:

chmod +s /sbin/shutdown

thank you !!

Cool for my mythtv box with lirc remote control!!

MBybee · 01-13-2010, 10:53 AM

Quote:

Originally Posted by frenchn00b

found at the same time: http://linux.byexamples.com/archives...sudo-password/

I added sudo before : and it works
above I placed a link how to make it without sudo :

Code:

chmod +s /sbin/shutdown

thank you !!

Cool for my mythtv box with lirc remote control!!

That's actually setuid - basically you're saying that any user who executes the command does so as the owner of the command (root).
Quick, but it is a bit dangerous as a fix-all.

frenchn00b · 01-13-2010, 11:02 AM

Quote:

Originally Posted by MBybee

That's actually setuid - basically you're saying that any user who executes the command does so as the owner of the command (root).
Quick, but it is a bit dangerous as a fix-all.

oh really? thank you for hte infromation..
I didnt do chmod +s /sbin/shutdown

Well, ... the testing was as follows:

visudo

Code:

frenchnoob ALL=(ALL) NOPASSWD: /sbin/shutdown
frenchnoob ALL=(ALL) NOPASSWD: /sbin/reboot

DONE

I added to .lircrc the command to do :

Code:

sudo shutdown now

when press on power
DONE, it works, ... but not well ...

The X stops (tinywm) and the pc goes to console, and no shutdown

the pc (console mode tty ) askes me for the root password

not working

Any ideas?

edit:
I start X like this : http://tldp.org/LDP/LG/issue72/chung.html

frenchn00b · 01-13-2010, 12:07 PM

OK , I found

I had certainly to use " for "shutdown now"

So I did like this: (working way):
no chmod +s

visudo and I add:

Code:

frenchnoob ALL=(ALL) NOPASSWD: /sbin/halt
frenchnoob ALL=(ALL) NOPASSWD: /sbin/reboot

then into .lircrc, I use:

Code:

begin
    prog = irexec
    button = Power
    config = sudo halt &
end

Thank you ! It can work now.

mythtv or Freevo linux home tv recommended.

MBybee · 01-13-2010, 12:55 PM

Excellent to see! You might want to mark the thread as solved for anyone who comes looking. I know I wasn't able to find any instructions for tinywm in the first couple searches I did.

frenchn00b · 01-13-2010, 03:37 PM

Quote:

Originally Posted by the trooper

As MBybee said you need to use sudo.
What window manager are you using?.
The reason i ask is because i do something very similar to shutdown/restart Fluxbox from a menu entry.

tinywm for mythtv .. it is nice
all goes via nut's n bolt and .xinitrc