I have noticed, that local user on RH 6.1 can gain root privileges only with the simple command shutdown now. After he types his own password, the shutdown goes into rl 1 (swingle mode). I think, that the shutdown should go into rl 0 (halt) or at least rl 6.
see error 8127 ...
this can be configured locally, and we consider it a feature, not an option. If your computers are in a lab-like setting, this can be easily adjusted.
Hmms, ok, where can i find some addition info about such "features"? Is this only in regular manual, so I must buy boxed RH?? Now I disabled all except root in/etc/pam.d/shutdown file, so only root can reboot, and if something goes wrong, the ctrl+alt+del will work as _reboot_. And me sorry for calling this bug and for reporting reported thing...