1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
|
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<TITLE> [Mageia-dev] Mageia 2 - Security issiue
</TITLE>
<LINK REL="Index" HREF="index.html" >
<LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Mageia%202%20-%20Security%20issiue&In-Reply-To=%3Cm3mwzkenjp.fsf%40euphor.blino.org%3E">
<META NAME="robots" CONTENT="index,nofollow">
<META http-equiv="Content-Type" content="text/html; charset=us-ascii">
<LINK REL="Previous" HREF="019375.html">
<LINK REL="Next" HREF="019402.html">
</HEAD>
<BODY BGCOLOR="#ffffff">
<H1>[Mageia-dev] Mageia 2 - Security issiue</H1>
<B>Olivier Blin</B>
<A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20Mageia%202%20-%20Security%20issiue&In-Reply-To=%3Cm3mwzkenjp.fsf%40euphor.blino.org%3E"
TITLE="[Mageia-dev] Mageia 2 - Security issiue">mageia at blino.org
</A><BR>
<I>Thu Oct 18 00:33:46 CEST 2012</I>
<P><UL>
<LI>Previous message: <A HREF="019375.html">[Mageia-dev] Mageia 2 - Security issiue
</A></li>
<LI>Next message: <A HREF="019402.html">[Mageia-dev] Mageia 2 - Security issiue
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#19399">[ date ]</a>
<a href="thread.html#19399">[ thread ]</a>
<a href="subject.html#19399">[ subject ]</a>
<a href="author.html#19399">[ author ]</a>
</LI>
</UL>
<HR>
<!--beginarticle-->
<PRE>"Johnny A. Solbu" <<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">cooker at solbu.net</A>> writes:
><i> I have a guest computer, that also operates as a file server.
</I>><i> Up until recent weeks, it ran Mandriva 2010.2, and various mdv versions before that.
</I>><i> It was configured to disallow any user except root from reboting or
</I>><i> shutting it down. If any user managed to figure out how to shut it
</I>><i> down, it would prompt for the root password.
</I>><i>
</I>><i> In Mageia 2 this does not work, and it creates a security issiue for me, as it is critical that this computer is always running.
</I>><i>
</I>><i> I have done the same in Mageia that I did in Mandriva:
</I>><i> systemsettings --> Login-screen --> Shutdown --> Allow shutdown
</I>><i> Select "Only Root" in Loal, and "Nobody" for remote, and press Apply. When i launch systemsettings again to check, the changes are still there.
</I>><i> I restart X, to have the settigns take effect. It does not change anything. Users can still reboot or shutdown the system.
</I>><i> When the computer is rebooted, the settings are reset to default, which is "Everybody"
</I>><i>
</I>><i> Has anyone else seen this?
</I>
Hi,
You can probably configure this with msecgui, there's an ALLOW_REBOOT
setting there.
--
Olivier Blin - blino
</PRE>
<!--endarticle-->
<HR>
<P><UL>
<!--threads-->
<LI>Previous message: <A HREF="019375.html">[Mageia-dev] Mageia 2 - Security issiue
</A></li>
<LI>Next message: <A HREF="019402.html">[Mageia-dev] Mageia 2 - Security issiue
</A></li>
<LI> <B>Messages sorted by:</B>
<a href="date.html#19399">[ date ]</a>
<a href="thread.html#19399">[ thread ]</a>
<a href="subject.html#19399">[ subject ]</a>
<a href="author.html#19399">[ author ]</a>
</LI>
</UL>
<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>
|
