On Mon, 22 Oct 2001, Aaron Konstam wrote:
> I agree you have to be logged in at the console. But I guess I am unix
> predjudiced but why should a normal user ever be able to halt or reboot
> a machine. Sounds like a security hole to me.
>
Well, given a choice between them being able to a controlled halt or
reboot of the system, and having them hit the reset button, or putt the
power cord, I know what I would preferrer. For most systems, the
security hole is letting the person access the console in the first
place. Unless the console is physically seperate from the computer
itself, or the box has other physical protection that stops the user
from shutting down the system, or rebooting it in other ways, the
present system makes sence.
If you deside to stop a normal user from being able to run these
programs from the console, then you should also disable the
Ctrl-Alt-Delete trapping that also does a controlled reboot of the
system.
Mikkel
--
Do not meddle in the affairs of dragons,
for you are crunchy and taste good with ketchup.
_______________________________________________
Seawolf-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/seawolf-list
