1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Mageia 2 - Security issiue
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Mageia%202%20-%20Security%20issiue&In-Reply-To=%3C201210160513.10162.cooker%40solbu.net%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="019367.html">
<LINK REL="Next" HREF="019399.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Mageia 2 - Security issiue</H1>
<B>Johnny A. Solbu</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Mageia%202%20-%20Security%20issiue&In-Reply-To=%3C201210160513.10162.cooker%40solbu.net%3E"
TITLE="[Mageia-dev] Mageia 2 - Security issiue">cooker at solbu.net
</A><BR>
<I>Tue Oct 16 05:13:05 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="019367.html">[Mageia-dev] [soft-commits] [6240] various optimizations from mdv svn
</A></li>
<LI>Next message: <A HREF="019399.html">[Mageia-dev] Mageia 2 - Security issiue
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#19375">[ date ]</a>
<a href="thread.html#19375">[ thread ]</a>
<a href="subject.html#19375">[ subject ]</a>
<a href="author.html#19375">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>I have a guest computer, that also operates as a file server.
Up until recent weeks, it ran Mandriva 2010.2, and various mdv versions before that.
It was configured to disallow any user except root from reboting or shutting it down. If any user managed to figure out how to shut it down, it would prompt for the root password.
In Mageia 2 this does not work, and it creates a security issiue for me, as it is critical that this computer is always running.
I have done the same in Mageia that I did in Mandriva:
systemsettings --> Login-screen --> Shutdown --> Allow shutdown
Select "Only Root" in Loal, and "Nobody" for remote, and press Apply. When i launch systemsettings again to check, the changes are still there.
I restart X, to have the settigns take effect. It does not change anything. Users can still reboot or shutdown the system.
When the computer is rebooted, the settings are reset to default, which is "Everybody"
Has anyone else seen this?
--
Johnny A. Solbu
PGP key ID: 0xFA687324
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: </pipermail/mageia-dev/attachments/20121016/d1993fe0/attachment.asc>
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="019367.html">[Mageia-dev] [soft-commits] [6240] various optimizations from mdv svn
</A></li>
<LI>Next message: <A HREF="019399.html">[Mageia-dev] Mageia 2 - Security issiue
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#19375">[ date ]</a>
<a href="thread.html#19375">[ thread ]</a>
<a href="subject.html#19375">[ subject ]</a>
<a href="author.html#19375">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
