Description of problem: A regular user can reboot system using command 'shutdown -r now'. Version-Release number of selected component (if applicable): systemd-204-9.fc19.x86_64 How reproducible: Tested in a text console with only 1 user connected to system. Steps to Reproduce: 1. turn on PC 2. log as a regular user 3. type 'shutdown -r now' Actual results: System reebots Expected results: Command execution denial + message 'Must be root.' Additional info: > uname -a > Linux fobos 3.10.5-201.fc19.x86_64 #1 SMP Wed Aug 7 16:25:24 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux > sestatus > SELinux status: disabled
The local console user can always do that. He can also switch of the system via the power button or pull the power cable.
This is not a bug, it's a feature, and users have been able to shutdown the system via GNOME's menu since ages. If you don't like this, please reconfigure PolicyKit to deny local users to shutdown the machine.