Red Hat Bugzilla – Bug 184592
Shutdown command needs to be root level command
Last modified: 2014-03-16 22:58:49 EDT
Description of problem:
Any user can do a sustem shutdown as the command is not root level protected
Version-Release number of selected component (if applicable):
core4 / core5
Issue shutdown command from general or guest user
Steps to Reproduce:
System shuts down
Administrator password should be prompted for, if not root logon. That is,
shutdown should only be available from the root logon administration level.
If the pc is behind a barrier, then the shutdown button is not available and the
system will not be able to suffer an unauthorized shutdown.
shutdown/reboot/poweroff/halt stuff belong to SysVinit.
Please reassign back if fixing on usermode side is needed.
This is normal behavior of the usermode symlinks; the console user can shut down.
You can change this behavior by editing/removing
Package name is now sysvinit in Fedora.