No password needed for user to halt system. Did a full install on a Compaq Deskpro EN 350 MHz Pentium II. I can log in as a user, then type halt, and the system shuts down with no prompt for a password. Tried adding another user, but the results are the same.
If the user is physically logged in at the system console, then this is intended (users can also flip the power switch, but halt is safer). If not, then please reopen this bug as it would be an actual security problem. If you wish to disable this feature, uninstalling the usermode package should accomplish that.
*** Bug 55987 has been marked as a duplicate of this bug. ***
*** Bug 18576 has been marked as a duplicate of this bug. ***