[Mageia-dev] Mageia 2 - Security issiue

[Olivier Blin]

"Johnny A. Solbu" <cooker at solbu.net> writes:

> I have a guest computer, that also operates as a file server.
> Up until recent weeks, it ran Mandriva 2010.2, and various mdv versions before that. 
> It was configured to disallow any user except root from reboting or
> shutting it down. If any user managed to figure out how to shut it
> down, it would prompt for the root password.
>
> In Mageia 2 this does not work, and it creates a security issiue for me, as it is critical that this computer is always running.
>
> I have done the same in Mageia that I did in Mandriva: 
> systemsettings --> Login-screen --> Shutdown --> Allow shutdown
> Select "Only Root" in Loal, and "Nobody" for remote, and press Apply. When i launch systemsettings again to check, the changes are still there.
> I restart X, to have the settigns take effect. It does not change anything. Users can still reboot or shutdown the system.
> When the computer is rebooted, the settings are reset to default, which is "Everybody"
>
> Has anyone else seen this?

Hi,

You can probably configure this with msecgui, there's an ALLOW_REBOOT
setting there.

-- 
Olivier Blin - blino