Bug 17882

Summary:	no password needed for user to halt system
Product:	[Retired] Red Hat Linux	Reporter:	joe_mccarthy
Component:	usermode	Assignee:	Nalin Dahyabhai <nalin>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	high
Version:	7.0	CC:	dr, mmv
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2000-09-30 03:49:12 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description joe_mccarthy 2000-09-26 21:33:17 UTC

No password needed for user to halt system.  Did a full install on a Compaq
Deskpro EN 350 MHz Pentium II.  I can log in as a user, then type halt, and
the system shuts down with no prompt for a password.  Tried adding another
user,  but the results are the same.

Comment 1 Nalin Dahyabhai 2000-10-02 05:50:05 UTC

If the user is physically logged in at the system console, then this is intended
(users can also flip the power switch, but halt is safer).  If not, then please
reopen this bug as it would be an actual security problem.  If you wish to
disable this feature, uninstalling the usermode package should accomplish that.

Comment 2 Nalin Dahyabhai 2002-01-18 21:53:01 UTC

*** Bug 55987 has been marked as a duplicate of this bug. ***

Comment 3 Miloslav Trmac 2004-02-04 23:03:31 UTC

*** Bug 18576 has been marked as a duplicate of this bug. ***