RE:new twist on shutting down and restricting ssh users

[Andrew Agno <agno@AI.SRI.COM>]

dman writes:
 > 
 > I want to allow my dad to shut down the router/gateway.  I want to do
 > this by creating a login name "halt" that simply shuts down.  I did
 > this by making /sbin/halt the shell.  As I understand it, only root is
 > allowed to halt a system, so I made halt owned by root:halt with
 > permissions 4754.  This works, but I am interested in comments on the
 > pros/cons of this setup.  In addition, I want to disallow loggin in as
 > 'halt' via ssh.  How can I do that?

Check out the sshd manpage, and look for the DenyUsers and DenyGroups
entries in the config file.

Andrew.