FS#31059 - [sysvinit] allow to do reboot/halt to 'power' group

Attached to Project: Arch Linux
Opened by Sergej Pupykin (sergej) - Wednesday, 08 August 2012, 08:56 GMT
Last edited by Eric Belanger (Snowman) - Monday, 20 August 2012, 07:33 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To Eric Belanger (Snowman)
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

It would be usefull allow users in 'power' group to switch off or reboot computer.

Solution is change owner group to 'power', set suid/sgid/sticky, disable execution by others:

chgrp power /sbin/halt /sbin/shutdown
chmod 07750 /sbin/halt /sbin/shutdown

in post_install/post_upgrade
This task depends upon

Closed by  Eric Belanger (Snowman)
Monday, 20 August 2012, 07:33 GMT
Reason for closing:  Won't implement
Additional comments about closing:  see first comment
Comment by Jan de Groot (JGC) - Wednesday, 08 August 2012, 14:30 GMT
These groups have never been a good idea and shouldn't be used in a default installation like this. If you want to implement it on your own system, you're free to do so, but there's better mechanisms than group membership to control who is allowed to shutdown or reboot a system.
Comment by Sergej Pupykin (sergej) - Wednesday, 08 August 2012, 16:43 GMT
"man shutdown" says about /etc/shutdown.allow, but it needs suid bit anyway I think.
Comment by Sergej Pupykin (sergej) - Wednesday, 08 August 2012, 16:51 GMT
Do you mean that sudoers and modern upower stuff is the single way?
Comment by Jelle van der Waa (jelly) - Thursday, 09 August 2012, 10:13 GMT
You can simply achieve this with sudo for you're own user.

Loading...