controlling access to halt, shutdown, poweroff, reboot

[Mikkel L. Ellertson]

Max Pyziur wrote:
> 
> Greetings,
> 
> 
> I've been running fedora ain various releases for several years and just
> noticed that when working lcally I can invoke poweroff and reboot as
> non-superuser, while remotely I cannot. Any guidance as to what controls
> this?
> 
> Thanks!
> 
> Max Pyziur
> pyz at brama.com
> 
I believe it is controlled by PAM. Specifically
auth       required     pam_console.so
in /etc/pam.d/halt. There are many things that are allowed for a
user logged in on the local console that are not allowed when logged
in remotely. It makes sense to let the local user do a shutdown -
better a controlled shutdown then pulling the plug or hitting the
reset switch.

Mikkel
-- 

  Do not meddle in the affairs of dragons,
for thou art crunchy and taste good with Ketchup!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20070807/514e30c4/attachment-0001.sig>