Re: normal user can shut down the system
On Sun, Oct 03, 2004 at 09:16:20PM +0200, Johannes Rohr wrote:
> Am Sun, 03 Oct 2004 17:30:20 +0200 schrieb Kenny Hitt:
>
> > Hi. I'm running the Gnome 2.6 on Sarge. I just noticed a normal user
> > can choose to shutdown or reboot the system on logout. How can I
> > disable such a stupid feature? I'm sure this was discussed, but I can't
> > find the info. Would someone please point me to a doc about this stupid
> > option
>
> For the average desktop user this feature is anything but stupid.
>
I guess we will have to disagree. For a system that supports many
users, it is a major security risk. If you are the only user of the
system, maybe you should just do everything as root and boot to single
user mode.
> > and how to disable it? Since the option is on the Gnome log out
> > dialog and I can't find anything about it in /etc/gdm.conf, it must be a
> > part of Gnome.
>
> The problem is that unlike KDM, gdm does not offer control over who is
> allowed to shutdown/reboot. Gnome-session does not execute shutdown
> by itself, it passes the request on to gdm.
>
> So you might want to file a wishlist bug
> against gdm.
>
I consider it an important bug, not a wishlist problem. Until it gets
fixed, I've purged gdm from my systems.
Kenny
Reply to: