Jehan PROCACCIA wrote:
hello,
I've got hundred of fedora19 station installed on computer lab for our students.
these are self service multi-user stations, users needs to restart the station
whenever they want to
unfortunatly apparently "polkit" prevents them to restart when another user is
(or had been ?) connected .
I know it is a safe behavior, but we defenitively want to enable users to
restart the station themself whenever they want to, but without requiring the
root password !
indeed, often student leave the room without disconecting (bad !) , then the
screen locks but still allows someone else to connect, but that second student
then cannot restart :-( .
I've tried lot of things:
http://askubuntu.com/questions/1190/how-can-i-make-shutdown-not-require-admin-password
apparently .pkla files a deprecated , and I confirmed that creating a
/etc/polkit-1/localauthority/50-local.d/allow_all_users_to_restart.pkla
containi
ng Action=org.freedesktop.consolekit.system.restart-multiple-users
AllowActive=yes doesn't work
then, from #fedora IRC I've been proposed to create rules in
/etc/polkit-1/rules.d :
http://paste.fedoraproject.org/36844/
[root@b06-02 rules.d]# cat 00-early-checks.rules
/* Allow shutdown when others are logged in */
polkit.addRule(function(action, subject) {
if (action.id == "org.freedesktop.consolekit.system.stop-multiple-users" ||
action.id ==
"org.freedesktop.consolekit.system.restart-multiple-users") {
return polkit.Result.YES;
}
});
it still fails, when user click on their username on the top right corner of the
gnome-session, schroll down to shutdown, then click restart, a window appears
warning that there are other user conencted and that "authentification is
required for rebooting the system while other users are logged in", and ends by
asking to enter the "Administrator" password :-(
Where can I remove that "feature" ?
1 - Do the students ever have to initiate a long running job and wait for
results? If so, having someone else reboot the machine is not desirable.
2 - It might be better to just log out idle users.
3 - However, if it is your intention to let any user reboot at any time, use
visudo to add a line:
%booters ALL=(ALL) NOPASSWD: /sbin/reboot
so the next student could log in and reboot from command line with
sudo su /sbin/reboot
Note that this requires putting all students allowed to do this (all of them?)
into a secondary group allowed to reboot.
My though is that there is a reason why this isn't the default, if there is no
legitimate use which justifies not rebooting, you certainly can do that. In
particular, you probably don't want people logging in remotely and just
rebooting the machine, students have been known to prank one another.
--
Bill Davidsen <david...@tmr.com>
"We have more to fear from the bungling of the incompetent than from
the machinations of the wicked." - from Slashdot
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
