Pablo Manalastas wrote:
>
> On Thu, 7 Jun 2001, omegaman megaman wrote:
>
> > im using a redhat7.0 and i found out that even if you
> > a ordinary user with shell account you can reboot the
> > system, is there a fix for this or extra configuration
> > that will fix this.?
<snip>
> By the way, the above statements apply not only to
> RedHat but to other Linux distros, and maybe to other
> Unix machines.
There's more to it if you're using RedHat 7.1 (and presumably 7.0). RH
has symlinked /usr/bin/reboot to /usr/bin/consolehelper.
consolehelper(8) is "a wrapper that helps console users run system
programs". In short, ANY user with shell and physical access can reboot
the machine just by typing "reboot".
I count this as a grave error on RH's part. While it's true that if you
have physical console you can force a reboot, one shouldn't tempt fate
by leaving such power in the hands of users.
Brian
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
To subscribe to the Linux Newbies' List: send "subscribe" in the body to
[EMAIL PROTECTED]
