Security :: Way To Allow Users To Perform Everything Except Shutdown Command
Nov 5, 2010
I have set up the sodoers file to allow everyone in "group1" full sudo permissions without needing to enter their password.
Is there any way to allow users to perform everything except the shutdown command?
View 5 Replies
ADVERTISEMENT
Apr 21, 2011
When I'm logged into my account, I can't shut down the computer if someone else is also logged in unless I supply the root password. However, if I log out, I can shut down from GDM without being challenged, even though another person is logged in, which could cause problems if that person is in the middle of some work. Is there a way to password-protect the gdm shutdown function if people are logged in?
View 2 Replies
View Related
Jun 30, 2010
Im not getting able to neither add new users using command useradd nor delete existing users using command userdel. And even Im not getting able to login into any existing users except root. It was ok before. Im having this problem very recently on my linux server. Im using RHEL5.
View 9 Replies
View Related
Jul 22, 2010
I've been trying to use a find command with -exec to find the differences between identically-named files in different paths. My initial attempt was to do something like this:
Code: find trunk/ -type f -not -path '*.svn*' -exec diff '{}' `echo '{}' | sed 's/^trunk///'` ;
Unfortunately this does not work at all as expected (the diff ends up executing on the same file)! I have narrowed it down to the subshell (inside the ``) but beyond that I have no idea. For some reason the sed, though written correctly, does not perform the substitution. I've changed the diff to echo and played with the sed command and the only way I can get it to perform _any_ substitution is to use .* as the regex. Even s/.*trunk.*/SUB/ doesn't work. Any insight into the inner workings of -exec/subshells/pipes or some crap I'm missing? Don't worry about rewriting the command to make it work; I simply swapped the paths and got rid of the subshell nonsense and everything works fine.
View 4 Replies
View Related
Aug 2, 2010
Is there an equivalent command that will perform the same task as ALT+F4 keystroke? I want to create a simple script that lirc can use so I can set up a button on my remote to close program windows that pop up (like when plugging in usb thumb drives, inserting a dvd, and other windows), and avoid having to remote desktop or go into CLI to kill the window.
View 9 Replies
View Related
Dec 10, 2010
looking for a command that shutdown/reboot my ubuntu just same as process that happened when I press shutdown buttonIn fact I need to close all programs that are running and then PC shutdown (that happened when I press shutdown button).
View 9 Replies
View Related
Nov 1, 2010
We are trying to set up a classroom training environment where our SIG can hold classes for prospective converts from Microsoft/Mac. The ten machines will have /home/student01..10 and /home/linsig01..10 as users. We want /home/student01 to be able to explore and sudo so they can learn to administer their personal machines at home. We don't want them to be able to modify (sudo) /home/linsig01. I've seen the tutorial on Access Control Lists but I'd like other input so we get it right the first time.
View 3 Replies
View Related
Mar 10, 2010
My home computer is (of course) a multi-user system with my wife and I each having separate non-root accounts. Usually at the end of the day I exit X, drop down to the terminal, su to root and type
Code:
shutdown -h now
to turn the computer off for the night.
However, my wife doesn't know (or care to know) the root password, but she would like to be able to shutdown the computer.I tried making a /etc/shutdown.allow file, and typing
Code:
/sbin/shutdown -a -h now from her account, but it didn't work. I got an error that one has to be root to do that.
So, how do I allow regular users to shutdown?
View 14 Replies
View Related
Apr 6, 2010
I installed a few media servers to stream something to my PS3 over the weekend, but now when trying to shutdown the computer, I'm asked to authenticate with a password since other users are still logged in. I installed quite a few programs over the weekend trying to get it to work, so I can't remove a specific one. Is there a way to see which daemons are logged in under a different session? Found it. It turned out to be mythtv.
View 3 Replies
View Related
Dec 30, 2010
If there is a simple way to prevent accidental shutdown when the following situation occurs:
Sometimes, I log in on my father's computer to run some administrations' tasks (updates...). For that, I use SSH since I'm frequently far from my parents and what I want is to prevent a shutdown run by my father. Of course, he should be able to turn off by himself if nobody else is connected.
Molly-Guard allows to prevent distant shutdown, my request is a kind of complementary software.
Does anyone know a project which could fit with this request? Do you have simple ideas to write a short code I know bash, perl, python...
View 3 Replies
View Related
Oct 15, 2010
To avoid having to input a password for the keyring each time I connect to the net via wireless, I enabled the 'Available to all users' option in Network Manager. Now, my question is this. Are the 'users' it refers to just those created on this machine? Would a drive-by be able to use my network without entering the password?
View 3 Replies
View Related
May 12, 2010
I have an environment with multiple projects that have a variety of government and commercial sponsors. We have been satisfied to this point with a netapp serving nfs/cifs and keeping a tight reign on nfs exports.Some of these projects have started asking us to provide access restricted sub-folders of the project space based on different groups that contain a user subset of the primary group.
We have a linux machine that serves as a version control front end to the netapp, mounting the project spaces via nfs. People are now mounting their project space via sshfs to this "front end" and sharing the root password of this sshfs client with everyone in their project, in turn creating a security hole to access the so called restricted sub-folders. I know all the obligatory responses referring to irresponsible user behavior but would like to see how others have addressed something like this where user behavior seems out of control.
View 12 Replies
View Related
Sep 9, 2009
i am using fedora 7. i want that, users other than root should not be able to shutdown the system, i had already changed the mode of /sbin/shutdown to -rwxr-w--(750)
View 1 Replies
View Related
Dec 23, 2010
as a normal user when I click logout from a KDE session nothing happens and I can't re-launch logout again, shutdown is doing the same.I have just upgraded to fc14 from fc13 yesterday tried to delete .kde folder and it has not been succesful tried to create another user and log to kde session and the new user also failed to logout or shutdown Root user is able to logout and shutdown I have no probs on GNOME for root or users.
View 1 Replies
View Related
Sep 9, 2009
i am using fedora 7. i want that, users other than root should not be able to shutdown the system, i had already changed the mode of /sbin/shutdown to -rwxr-w--(750)
View 5 Replies
View Related
Sep 26, 2010
I often get responses from people who first say: "Are you sure? You want your network to be exposed to the outside world?" I am not experimenting on a Production Server of NASA or any Security Concern Department. Friends, there is no harm in experimenting on your personal computer or on a test computer which is isolated from the production environment. Look at hackers! What do they do? If they don't know how security is breached then how would they come up with security measures?
If my question reads... "How to let any user perform Administrative Tasks on a Linux System irrespective of his/her privileges on that particular system?" then I would not get the right answers in the first place. They will say... "You are letting everyone destroy your system... are you sure you want to do that?" My question is: Why should we restrict ourselves from experimenting even if it sounds weird to other people?
I give you an example where it is desirable to let an unprivileged user perform certain tasks. You want to know if there are any employees in your office who are storing videos in their home directory and filling up the disk space to a great amount. You have a department called "Command Center or Data Center Operations or Help Desk" call it whatever you would, whose work is to monitor such activities, and you create an account "monitor" for them to monitor such activities but they are not able to do them:
[Code]..
View 8 Replies
View Related
Apr 29, 2010
i want to disable the su command on a server so that users cant run the su command i removed the comment from the 3 and 5 line in /etc/pam.d/su file but it doesnt seem to work the file is shown below
#%PAM-1.0
auth sufficient pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
[code]....
View 8 Replies
View Related
Jun 27, 2011
I need to perform ls, cp & tar in a directory that contains 80k text files, but i understand that there are limitation for files 70000 files and above.
I would like to know how can i perform such command e.g "ls -l | wc -l" with so many files.
View 4 Replies
View Related
Nov 4, 2010
I have a problem where the resolution during bootup, shutdown, switching users, and the theme icons look very grainy & cheap. It might have started when I booted in failsafe graphics mode and after that, it never went away. Could be wrong about how it happened but is there a way to get out of failsafe mode? Or a way to reconfigure default, normal graphics?
View 9 Replies
View Related
Oct 2, 2009
I am using Fedora 10 .Generally to update I open a virtual console by pressing Ctrl-Alt-F2,login as root and give the "yum update" command.Then I continue using my graphical terminal for other tasks from the 'non-root' account..Now my room-mate comes uses my 'non-root' account to browse web for few minutes and then opens a terminal types "halt", ENTER and viola...! My root account seems to be insulted by a 'non-root' user!.When I am doing updates or other important work as root any silly user can just 'halt' my computer. Can somebody tell me how to set up my computer so that when root is logged in no other user can simply halt the computer.
View 3 Replies
View Related
Feb 7, 2011
Is there a way to have the system shut down automatically after a set number of wrong user password entries? Am using ubuntu and kubuntu on two different machines. Am thinking it would make sense to have this feature on an encrypted laptop system in case someone were to take it whilst it's on suspend, screenlock, hibernate or login screen and hence the disk is vulnerable.
View 6 Replies
View Related
Apr 29, 2011
My laptop randomly shuts off, at first I thought it was an issue with the laptop overheating but during the install of 11.04 I made sure the laptop had a fan blowing on it constantly and checked it and determined it couldn't have overheated. My problem now is that I was able to use a live cd to access my old files but was presented with only two files stating that my files were encrypted, I'm don't ever recall encrypting my files and so I'm without a passphrase.
What I'm wondering, is there a way to gain access without the passphrase? Or is there a way to fix the corrupt install?
View 4 Replies
View Related
Jun 4, 2010
At the GRUB menu, what is the command to shut down? Typing "halt" in the command line doesn't work and only hangs the computer on the command line screen. Heard that "init 0" works?
View 1 Replies
View Related
Aug 17, 2011
I am running Debian Squeeze on an Intel DH55TC motherboard. When I issue a shutdown command
shutdown -h now
The system goes shutting down. Eveything looks fine, and the main console shows all process being stopped. In the end it says "System will now halt". Then a few seconds later, it restarts. It is unclear what is causing this, because nothing is written to the screen. It just goes blank and starts rebooting. Looking afterwards in syslog doesn't show anything also.
View 14 Replies
View Related
Jun 11, 2010
I guess there is some bash shell trick to run poweroff when an other command is over, like let's say su -c 'yum update'.
Creating a shell script with these two commands, the one below the other, would be sufficient? I can't try it now.
View 5 Replies
View Related
Aug 12, 2010
Does anybody know of a command to get this Gnome shutdown dialog?
View 7 Replies
View Related
Mar 11, 2011
I've added entries to my Openbox menu labeled Reboot and Shutdown. Problem is, reboot and shutdown h only work as root, and I never login as root. I've tried su-to-root -c reboot, but the menu entries remain unresponsive. I do not have sudo installed because I feel it is a security issue. However, I found that sudo reboot works with the menu entry, but only if my account is set to use sudo without a password in /etc/sudoers. I use tint2 as my panel, but have had no luck with finding a shutdown/reboot button.
View 4 Replies
View Related
Apr 20, 2010
I was reading that if I want to do a one time scheduled command, I should use at, which I've never done, as opposed to cron, which i'm kinda familiar with. But what I want to do is reboot my server at 3am tomorrow and force it to check the file systems with a shutdown -rF. For this do I even need to use "at" or could I just say shutdown -rF 3:00.Will that also know that I mean 3am tomorrow and not say in 3 minutes from now or 3pm?
View 14 Replies
View Related
Dec 26, 2010
I have a custom command I've made to quickly shut down all of my xen instances.
Code:
[root@LCENT02 ~]# virtdown
-bash: syntax error near unexpected token `2'
As you can see it fails when I try to run it on the command line. It is stored in an ~/.env file in my home directory. What is odd to me is if I open the .env file and copy the command from there and paste it into the command line, it does actually work!
Code:
[root@LCENT02 ~]# for i in `virsh list | grep -v -e Id -e --- -e Domain-0 | awk '{print $1}'`; do virsh shutdown $i; done
Domain 1 is being shutdown
Domain 2 is being shutdown
Domain 3 is being shutdown
And this is how I have the command entered into my .env file:
Code:
alias virtdown="for i in `virsh list | grep -v -e Id -e --- -e Domain-0 | awk '{print $1}'`; do virsh shutdown $i; done
Why would this command work if you paste it onto the command line but not use the custom command virtdown?
View 1 Replies
View Related
Jul 6, 2010
I shutdown around 4 - 5 hours ago which would be around 14:00 to 15:00 time range. But as you can see there's no entry for it. Why? and how can i find when i last shutdown?
Code:
last
lyle pts/1 :0.0 Tue Jul 6 19:18 still logged in
lyle :0 Tue Jul 6 19:15 still logged in
lyle tty7 :0 Tue Jul 6 19:15 still logged in
[Code]....
View 1 Replies
View Related