From owner-freebsd-questions Wed Jul 18 16:49:53 2001 Delivered-To: freebsd-questions@freebsd.org Received: from smtprelay3.adelphia.net (smtprelay3.adelphia.net [64.8.25.8]) by hub.freebsd.org (Postfix) with ESMTP id B779737B405 for ; Wed, 18 Jul 2001 16:49:50 -0700 (PDT) (envelope-from ipthomas_77@yahoo.com) Received: from scraemondaemon.my.domain ([24.49.96.3]) by smtprelay3.adelphia.net (Netscape Messaging Server 4.15) with ESMTP id GGP0VM02.S4O; Wed, 18 Jul 2001 19:50:10 -0400 Received: (from ipt@localhost) by scraemondaemon.my.domain (8.11.4/8.11.4) id f6INloO71403; Wed, 18 Jul 2001 19:47:50 -0400 (EDT) (envelope-from ipt) Date: Wed, 18 Jul 2001 19:47:50 -0400 From: User & Ian Patrick Thomas To: Thomas Stratmann Cc: freebsd-questions@freebsd.org Subject: Re: shutdown group Message-ID: <20010718194750.E51074@localhost> References: <3B55B7B8.26500790@ruhr-uni-bochum.de> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <3B55B7B8.26500790@ruhr-uni-bochum.de>; from thomas.stratmann@ruhr-uni-bochum.de on Wed, Jul 18, 2001 at 06:22:16PM +0200 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG sudo is the way to go. I'll give you the way I have this setup as an example in my sudoers file. Host_Alias LOCALHOST=your hostname -s here Cmnd_Alias SHUTDOWN=/sbin/shutdown username LOCALHOST = SHUTDOWN This should do it. Ian As it was put forth by Thomas Stratmann on Wed, Jul 18, 2001 at 06:22:16PM +0200... > Hi folks, > > I would like to have a group of people on my machine being able to > reboot/halt/shutdown without having to su root. The only solution I have > seen before is to chgrp the executables halt and reboot into this group > and making them suid (both check for EUID being zero, I believe, so the > second step seems necessary). > > I would like you to advise me > - if there is a better solution > - what security issues will give me trouble with the above way (SUID > always rings alarm bells for me...) > > Thanks in advance! > Thomas Stratmann > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message