Re: Problem with '/etc/shutdown.allow'

[Andreas Hetzmannseder <hetzmann@netway.at>]

Hello, Carel!
You should have received the following message earlier, but somehow it
was lost. Here it is again:

Carel Fellinger wrote:
> 
> On Mon, Oct 16, 2000 at 06:26:20PM +0200, Andreas Hetzmannseder wrote:
> > Hello, debian-users!
> >
> > There are two users on my debian system, who I want to be able to reboot
> > and halt without being root. For this purpose I created
> > /etc/shutdown.allow with the corresponding user names. [...}
> 
> shutdown isn't in your PATH, but even if it were it has no SUID flag so
> it won't do you no good.

You are absolutely right. Well I wouldn't believe it, so I had to see
for myself: /sbin is now in my path but what's the point of it?
 
> > [...] However when I attempt to type 'shutdown -a -r now' or
> > 'shutdown -a -h now' by myself, it says 'shutdown: command not found'.
> > I still have to be root in this case.
> 
> I've just read the Fine Manual just to please you:) and I think it only
> effects Ctrl-Alt-Del from the console, not calling shutdown from the
> command-line unless you make it a SUID program. (for the latter to have
> a change of working make sure the shutdown command is in your PATH, as it
> isn't by default for us mortal users)

'shutdown' is now in my path - what else shall I do?

> What happens is:
> the keyboard handler (running as root) intercepts the magic Ctrl-Alt-Del
> and tells init to shut-up. The keyboard handler knows to do this as that
> is what it was told by the /etc/inittab entry for the Ctrl-Alt-Del key
> combo.

Thank you for your explanation.
 
> > 'man shutdown' tells me that I should add an entry in /etc/inittab, but
> > I don't know what to enter... Can somebody help me please?
> 
> Well, you shouldn't add the entry but modify the excisting one and add to
> that entry the '-a' flag. [...]

Now I feel completely stupid. Which existing entry shall I modify?
Please have a look at my /etc/inittab:

    id:2:initdefault
    si::sysinit:/etc/init.d/rcS
    ~~:S:wait:/sbin/sulogin
    l0:wait:/etc/init.d/rc0
    l1:wait:/etc/init.d/rc1
    l2:wait:/etc/init.d/rc2
    l3:wait:/etc/init.d/rc3
    l4:wait:/etc/init.d/rc4
    l5:wait:/etc/init.d/rc5
    l6:wait:/etc/init.d/rc6
    z6:6:respawn:/sbin/sulogin
    ###############################################
    ca:12345:ctraltdel:/sbin/shutdown -t1 -a -r now
    ###############################################
    kb::kbrequest:/bin/echo "Keyboard Request -- edit /etc/inittab to
let this work."
    pf::powerwait:/etc/init.d/powerfail start
    pn::powerfailnow:/etc/init.d/powerfail now
    po::powerokwait:/etc/init.d/powerfail stop
    1:2345:respawn:/sbin/getty 38400 tty1
    2:23:respawn:/sbin/getty 38400 tty2
    3:23:respawn:/sbin/getty 38400 tty3
    4:23:respawn:/sbin/getty 38400 tty4
    5:23:respawn:/sbin/getty 38400 tty5
    6:23:respawn:/sbin/getty 38400 tty6

Please note the highlighted "candidate" and that I have *not* changed
anything so far.

I would be glad if you could give me a clue.

Thank you very much so far,
Andreas.