I'm running RedHat 4.5 ES with SELinux=enforcing. We have been trying to harden our security.

On the login screen, there are (at least) 2 buttons named Reboot and Shutdown. These buttons are used by non-sysadmins to shutdown the computer without opening a terminal window and doing it the normal way.

Somewhere in our security, these buttons no longer function. We did not change any gdm files. There is no shutdown.allowed file, not sure that is relevent. Users gdm, xfs and shutdown all exist in the passwd file. My default run level is 5.

I have been to System Settings - Login Screen - Security Tab and played with the Show Actions Menu to no avail.

I would appreciate any ideas on how to make these buttons functional again.

If it's SE Linux then an AVC message should be logged. If it's something else then it should show in the X11/Xorg logs (or elsewhere?). You could verify the integrity of your installed configuration files to see which ones changed ant take it from there.

No AVC messages and other logs ok.

At first I thought that I had a corrupt RHEL.xml file in /usr/share/gdm/themes/RHEL but that has not been changed. Maybe the thing that calls the RHEL.xml is corrupt. Of course, I don't know what calls the RHEL.xml. The button used to work and now they don't light up when I mouse-over.

The next step is to reload without security then step thru my security scripts one line at a time, stop and log out/in to see if the reboot/shutdown buttons are still lit. Tedious, for sure.

Thanks for your help.
Linda

If you've got RHEL presumably its a legit paid for copy? In which case, you're entitled to phone and ask them. It'll be quicker.