[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Dumb question: How do you reboot?



Leo Spalteholz <leo@spalteholz.ca> writes:

> On March 4, 2003 09:01 pm, Eric G. Miller wrote:
>> On Tue, Mar 04, 2003 at 09:17:39PM -0600, Kent West wrote:
>> > I believe the next version of Gnome's login screen (gdm)
>> > implements a menu allowing you to shutdown/reboot.
>>
>> Hmm, doesn't the version in Woody have that cabability?  GDM has
>> been able to do that for quite some time (I think SystemMenu is set
>> "false" by default).
>
> How come that works anyway?  If you are not logged in as root, in fact 
> you're not logged in at all, then why are you allowed to shut down 
> the machine?

The gdm process runs as root (it has to to be able to change user ID's
to yours when you log in), so it also has permission to run shutdown.

> Is this not a security risk?  Couldn't anyone just ssh in and then
> reboot the machine without logging in or what am I missing here?

It's hard to be able to click on the gdm window on the local console
from a remote ssh session.  :-)

-- 
David Maze         dmaze@debian.org      http://people.debian.org/~dmaze/
"Theoretical politics is interesting.  Politicking should be illegal."
	-- Abra Mitchell



Reply to: