[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: How to suspend x86 via apm as non-root user?



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, 25 Aug 2004, Ivo Marino wrote:

> anyway I think apm -s should also work without being root or using sudo
> for as-root execution, this is at least what happens on PowerPC
> machines with pmud (Similar to apmd for x86) installed: An user can
> suspend the machine.

Imagine, if you will, a server.

Imagine that this server is a web server, and has the ability to run CGI
scripts.

Imagine that this web server has 4,000 users.

Imagine that one of them thinks it would be funny to insert

    exec ('apm -s');

into a Perl script.

Now you know why apm needs root. :)

> When /dev/apm_bios is readable by users apm -s should also work for
> users, IMHO.

No. Users may want to check what the state of the BIOS is (for example,
they may want to know how much battery life is left). That doesn't mean we
want to necessarily trust them with the ability to, effectively, remotely
shutdown the entire system.
- -- 
GnuPG public key available from
http://ca.geocities.com/redvision.geo/gnupg_key.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBK/uFMqUhaD+LmFcRApfFAKCPFMlik5swab6T0lYxZv9EZY4PtQCfUz2X
tqEQr+YaOMVbmDlO4P5aJ0c=
=bQem
-----END PGP SIGNATURE-----



Reply to: