Bug 17882 - no password needed for user to halt system
Summary: no password needed for user to halt system
Status: CLOSED NOTABUG
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: usermode
Version: 7.0
Hardware: i386
OS: Linux
high
medium
Target Milestone: ---
Assignee: Nalin Dahyabhai
QA Contact:
URL:
Whiteboard:
Keywords: Security
: 18576 55987 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2000-09-26 21:33 UTC by joe_mccarthy
Modified: 2008-05-01 15:37 UTC (History)
2 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2000-09-30 03:49:12 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description joe_mccarthy 2000-09-26 21:33:17 UTC 
No password needed for user to halt system.  Did a full install on a Compaq
Deskpro EN 350 MHz Pentium II.  I can log in as a user, then type halt, and
the system shuts down with no prompt for a password.  Tried adding another
user,  but the results are the same.
Comment 1 Nalin Dahyabhai 2000-10-02 05:50:05 UTC 
If the user is physically logged in at the system console, then this is intended
(users can also flip the power switch, but halt is safer).  If not, then please
reopen this bug as it would be an actual security problem.  If you wish to
disable this feature, uninstalling the usermode package should accomplish that.
Comment 2 Nalin Dahyabhai 2002-01-18 21:53:01 UTC 
*** Bug 55987 has been marked as a duplicate of this bug. ***
Comment 3 Miloslav Trmac 2004-02-04 23:03:31 UTC 
*** Bug 18576 has been marked as a duplicate of this bug. ***
Note You need to log in before you can comment on or make changes to this bug.