dman writes: > > I want to allow my dad to shut down the router/gateway. I want to do > this by creating a login name "halt" that simply shuts down. I did > this by making /sbin/halt the shell. As I understand it, only root is > allowed to halt a system, so I made halt owned by root:halt with > permissions 4754. This works, but I am interested in comments on the > pros/cons of this setup. In addition, I want to disallow loggin in as > 'halt' via ssh. How can I do that?
Check out the sshd manpage, and look for the DenyUsers and DenyGroups entries in the config file. Andrew.