From owner-freebsd-questions  Thu Mar 20 17:10:12 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id RAA14365
          for questions-outgoing; Thu, 20 Mar 1997 17:10:12 -0800 (PST)
Received: from narcissus.ml.org (root@brosenga.Pitzer.edu [134.173.120.201])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id RAA14359
          for <questions@freebsd.com>; Thu, 20 Mar 1997 17:10:10 -0800 (PST)
Received: from localhost (ben@localhost) by narcissus.ml.org (8.8.5/8.7.3) with SMTP id RAA08058; Thu, 20 Mar 1997 17:10:15 -0800 (PST)
Date: Thu, 20 Mar 1997 17:10:15 -0800 (PST)
From: Snob Art Genre <ben@narcissus.ml.org>
To: "K. Marsh" <durang@u.washington.edu>
cc: questions@freebsd.com
Subject: Re: chmod, chown, and shutdown.
In-Reply-To: <Pine.A32.3.95.970320160858.52298D-100000@goodall.u.washington.edu>
Message-ID: <Pine.NEB.3.95.970320170925.8039A-100000@narcissus.ml.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Make shutdown belong to root, group operator, and put your roommate in
group operator.  Then change the permissions on it to 4550.

On Thu, 20 Mar 1997, K. Marsh wrote:

> My roomate uses my computer to check his e-mail and do a little web
> browsing in FreeBSD, as well as to use Word, Excel, and other expensive
> programs in that other operating system.
> 
> How can I give him the ability to issue "shutdown" without giving him root
> privileges?
> 
> I am aware that it may be a security hole, but he's not going to hack my
> system. I just don't want him to able to destroy everything by accident.
> 
> I tried using chmod and chown on the binary, but even when he owns it and
> it's in 777 mode, it doesn't execute.
> 
> I'm using 2.2-RELEASE if it makes any difference.
> 
> Thanks,   Ken Marsh
> 
> 



 Ben

"You have your mind on computers, it seems."