Red Hat Bugzilla – Bug 52010
Can Shutdown/Restart Server w/o Logging In
Last modified: 2007-04-18 12:36:01 EDT
Description of Problem:
At the GDM login prompt, I am able to shutdown and restart the server
without logging in. This shows a lack of security, since any user can
walk by the computer and shutdown/restart it. Win NT Server & 2000
Server force the administrator to log in to use these options.
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. At the GDM Login Prompt, click System
2. Click Shutdown or Restart
3. Watch System Shutdown/Restart
To be Prompted for root password to restart/shutdown.
You can also type "ctrl-alt-del" at the console, always have been able to.
If you want to disable this, there are options in /etc/X11/gdm/gdm.conf, and
you can turn off ctrl-alt-del in /etc/inittab. People can still hit the power
button though, if you haven't physically concealed it.