I'm curious why any user logged in at the console can issue the 'reboot' command and reboot the system.? I've tested/verified this to work, and read some older posts about this.? If it were a bug, I suspect it would be fixed by now. Also, if a user is logged into the console, and then logs in via ssh from another system, that user can also reboot the system from that ssh connection.? It would seem that once a user authenticates on the console, and remains on the console, they can reboot from any other/new tty.? Once they drop off the console, the ssh connections can no longer reboot. If this is by design, why? Thanks! Regards, Joseph Spenner --- ? If life gives you lemons, keep them-- because hey.. free lemons. "~heart~ Sticker"? fixer:? http://microflush.org/stuff/stickers/heartFix.html
On May 5, 2013 6:39 AM, "Joseph Spenner" <joseph85750 at yahoo.com> wrote:> > I'm curious why any user logged in at the console can issue the 'reboot'command and reboot the system. I've tested/verified this to work, and read some older posts about this. If it were a bug, I suspect it would be fixed by now.> Also, if a user is logged into the console, and then logs in via ssh fromanother system, that user can also reboot the system from that ssh connection. It would seem that once a user authenticates on the console, and remains on the console, they can reboot from any other/new tty. Once they drop off the console, the ssh connections can no longer reboot.> > If this is by design, why? > > Thanks!"Consolekit" Users with physical acces have higher capabilities in software because, well, physical access is root access. Also, that configuration works better for workstation installations; imagine if a user couldn't shut down their laptop safely because they didn't have admin privileges on the system. (Sorry for brief response; sending from phone.)
How are you rebooting? What groups are you in? From the command line? When I try this on Ubuntu (don't have a RHEL/CentOS here) I get "Have to be root" if I issue the /sbin/reboot command as an ordinary user. Cheers, Cliff On Sun, May 5, 2013 at 10:38 PM, Joseph Spenner <joseph85750 at yahoo.com>wrote:> I'm curious why any user logged in at the console can issue the 'reboot' > command and reboot the system. I've tested/verified this to work, and read > some older posts about this. If it were a bug, I suspect it would be fixed > by now. > Also, if a user is logged into the console, and then logs in via ssh from > another system, that user can also reboot the system from that ssh > connection. It would seem that once a user authenticates on the console, > and remains on the console, they can reboot from any other/new tty. Once > they drop off the console, the ssh connections can no longer reboot. > > If this is by design, why? > > Thanks! > > Regards, > Joseph Spenner > > --- > > > If life gives you lemons, keep them-- because hey.. free lemons. > "~heart~ Sticker" fixer: > http://microflush.org/stuff/stickers/heartFix.html > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos >