Re: Allowing any user to shutdown from gnome

2003-10-01 Thread Ben Edwards
On Mon, 2003-09-29 at 11:00, Martin Jungowski wrote:

 You can also set SUID on shutdown and add a Launcher to your Panel or
 Desktop in GNome.

Managed to SUID Root on shutdown (chmod a+s /sbin/shutdown) and can
shutdown from a command line but how do I add to the launcher.  I tried
one with the command '/sbin/shutdown -h now' but it douse not work.

Ben
-- 

* Ben Edwards   Tel +44 (0)1179 553 551  ICQ 42000477  *
* Homepage - nothing of interest here   http://gurtlush.org.uk *
* Webhosting for the masses http://www.serverone.co.uk *
* Critical Site Builderhttp://www.criticaldistribution.com *
* online collaborative web authoring content management system *
* Get alt news/views films online   http://www.cultureshop.org *
* i-Contact Progressive Video  http://www.videonetwork.org *
* Fun corporate graphics http://www.subvertise.org *
* Bristol Indymedia   http://bristol.indymedia.org *
* Bristol's radical news http://www.bristle.org.uk *



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Allowing any user to shutdown from gnome

2003-10-01 Thread David Fokkema
On Wed, 2003-10-01 at 13:34, Ben Edwards wrote:
 On Mon, 2003-09-29 at 11:00, Martin Jungowski wrote:
 
  You can also set SUID on shutdown and add a Launcher to your Panel or
  Desktop in GNome.
 
 Managed to SUID Root on shutdown (chmod a+s /sbin/shutdown) and can
 shutdown from a command line but how do I add to the launcher.  I tried
 one with the command '/sbin/shutdown -h now' but it douse not work.

I really wouldn't recommend this if you care about security the tiniest
bit. Do you want EVERYONE (even remote users) to be able to shutdown
_your_ system while _you_ are working with it?

David

-- 
Hi! I'm a .signature virus. Copy me into
your ~/.signature to help me spread!


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



RE: Allowing any user to shutdown from gnome

2003-10-01 Thread Mike Kuhar


-Original Message-
From: David Fokkema [mailto:[EMAIL PROTECTED]
Sent: Wednesday, October 01, 2003 9:09 AM
To: debian list
Subject: Re: Allowing any user to shutdown from gnome


On Wed, 2003-10-01 at 13:34, Ben Edwards wrote:
 On Mon, 2003-09-29 at 11:00, Martin Jungowski wrote:

  You can also set SUID on shutdown and add a Launcher to your Panel or
  Desktop in GNome.

 Managed to SUID Root on shutdown (chmod a+s /sbin/shutdown) and can
 shutdown from a command line but how do I add to the launcher.  I tried
 one with the command '/sbin/shutdown -h now' but it douse not work.

I really wouldn't recommend this if you care about security the tiniest
bit. Do you want EVERYONE (even remote users) to be able to shutdown
_your_ system while _you_ are working with it?

David

If you are bent on giving a specific user the ability to shutdown or reboot,
I would recommend doing so with sudo.  That way, you can target one user for
give limited root privileges, without SUIDing restricted commands.

-mk
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact
[EMAIL PROTECTED]


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



RE: Allowing any user to shutdown from gnome

2003-10-01 Thread Dan Anderson
Here's a thought: why don't you create a group shutdown_privileges and
allow anyone with access to the group to run a shell script like:

#! /usr/bin/bash

#wait 10 minutes before rebooting
shutdown -r -t time 10

That would be more secure then allowing everyone access to shutdown,
while at the same time allowing you to increase the number of people who
can shutdown?

-Dan


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Allowing any user to shutdown from gnome

2003-09-29 Thread Martin Jungowski
Hi,

Redhat has somehow managed to allow any user to shut the computer down
from the GNome logout menu. Usually, that only appears in case you're
running GNome2 as root - hence it almost never happens.

I have tried everything to get that enhanced logout menu in Debian
unstable / GNome2.x but I haven't found a way. IIRC there has been an
argument about this issue on this mailing list that basically stated
that this is not possible in Debian.
However you have two ways to achieve that shutdown for every user in
some way:

- Use KDE3  KDM - that'll allow you to shutdown the computer from said
logout menu
- Configure GDM so users can shut down the computer from there.

You can also set SUID on shutdown and add a Launcher to your Panel or
Desktop in GNome.


Maritn




On Sat, 2003-09-27 at 15:13, Ben Edwards wrote:
 Is there a way of allowing any user to shutdown.  Idealy from the
 taskbar (but I guess in this case it's simply a case of writing a short
 script and calling it from the taksbar.
 
 Ben 
 


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Allowing any user to shutdown from gnome

2003-09-27 Thread Jerome BENOIT
Have a look to /etc/X11/gdm/gdm.conf

Ben Edwards wrote:
Is there a way of allowing any user to shutdown.  Idealy from the
taskbar (but I guess in this case it's simply a case of writing a short
script and calling it from the taksbar.
Ben 




--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Re: Allowing any user to shutdown from gnome (gdmconfig show system menu)

2003-09-27 Thread Jacob Anawalt
Jerome BENOIT wrote:

Ben Edwards wrote:

Is there a way of allowing any user to shutdown.  Idealy from the
taskbar (but I guess in this case it's simply a case of writing a short
script and calling it from the taksbar.
Ben

Have a look to /etc/X11/gdm/gdm.conf


Also accessable as su -c /usr/sbin/gdmconfig

If you check show system menu which is on the security tab of 
gdmconfig in unstable. I don't know what version you are running. Also 
you can have it require a password using the standard greeter with 
secure system menu checked. Once this is set people can shut down after 
logging out.

This reminds me, I got one response about the graphical greeter  secure 
system menu on unstable so I'm still not sure if it is a config issue or 
a bug.

Does the standard but not the graphical greeter prompt for the root 
password for anyone else when secure system menu is selected? I believe 
both should, but the graphical does not on my system.

Jacob

--
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]