Red Hat Bugzilla – Bug 995692
regular user can reboot (II)
Last modified: 2013-09-12 15:35:02 EDT
Description of problem:
A regular user can reboot system using command 'shutdown -r now'.
Version-Release number of selected component (if applicable):
Tested in a text console with only 1 user connected to system.
Steps to Reproduce:
1. turn on PC
2. log as a regular user
3. type 'shutdown -r now'
Command execution denial + message 'Must be root.'
> uname -a
> Linux fobos 3.10.5-201.fc19.x86_64 #1 SMP Wed Aug 7 16:25:24 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
> SELinux status: disabled
The local console user can always do that. He can also switch of the system via the power button or pull the power cable.
This is not a bug, it's a feature, and users have been able to shutdown the system via GNOME's menu since ages. If you don't like this, please reconfigure PolicyKit to deny local users to shutdown the machine.