On 05/01/16 03:14, to...@tuxteam.de wrote: > On Mon, Jan 04, 2016 at 12:16:03PM -0500, Gary Dale wrote: >> On 04/01/16 10:55 AM, Floris wrote: >>> Dear list, >>> >>> Often there are multiple users working on my multiseat [1] system, >>> some of them are kids and they are not paying attention if someone >>> else is logged in. They can shutdown the computer even if someone >>> else is logged in and have an active session. >>> >>> Is it possible that only root can shutdown/ reboot the computer if >>> multiple users are logged in and when there is only one user that >>> user is able to shutdown the computer? >>> >>> Thanks, >>> >>> Floris >>> >>> [1] https://en.wikipedia.org/wiki/Multiseat_configuration >>> >> /sbin/reboot is a link that allows anyone to execute it. It points >> to /bin/systemctl that also allows anyone to execute it. The first >> part of your problem can be solved simply with fixing the >> permissions for reboot, shutdown & poweroff. > > Dunno about systemctl, but FWIW you can't change the permissions of > a symlink. It's always "all on".
Changing the permissions of the "linked-to" file would be sufficient then. -- Stuart Longland (aka Redhatter, VK4MSL) I haven't lost my mind... ...it's backed up on a tape somewhere.
signature.asc
Description: OpenPGP digital signature
