From owner-freebsd-questions Wed Nov 11 07:14:24 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id HAA24665 for freebsd-questions-outgoing; Wed, 11 Nov 1998 07:14:24 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from laker.net (jet.laker.net [205.245.74.2]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id HAA24657 for ; Wed, 11 Nov 1998 07:14:21 -0800 (PST) (envelope-from sfriedri@laker.net) Received: from nt (digital-pbi-111.laker.net [208.0.233.11]) by laker.net (8.9.0/8.9.LAKERNET.NO-SPAM.SPAMMERS.AND.RELAYS.WILL.BE.TRACKED.AND.PROSECUTED.) with SMTP id KAA01529; Wed, 11 Nov 1998 10:13:58 -0500 Message-Id: <199811111513.KAA01529@laker.net> From: "Steve Friedrich" To: "freebsd-questions@FreeBSD.ORG" , "Tolpin Vladimir" Date: Wed, 11 Nov 1998 10:09:16 -0500 Reply-To: "Steve Friedrich" X-Mailer: PMMail 98 Professional (2.01.1600) For Windows NT (4.0.1381;3) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Subject: Re: Shutdown Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, 11 Nov 1998 12:59:19 +0300, Tolpin Vladimir wrote: >Please explane me how common >user can down server without root password. > > I would like to have such solution: >Add new user call 'shutdown' with password witch use then system start and >when this user login system must start some script file and halt itself. Is >it >possible to do this ??? If yes, please tell me how can I do it. I tried two different solutions: 1. Add a user called shutdown and use vipw to change his shell from /bin/sh to /sbin/halt. Use vipw to change the user ID to 0 2. Use chmod +x /sbin/shutdown to allow ordinary users execute privilege. Solution 1 might allow users to Control-C their way to a root prompt. Solution 2 seems best to me. Anyone see any problems with solution 2 ?? Unix systems measure "uptime" in years, Winblows measures it in minutes. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message