From owner-freebsd-questions Tue Oct 15 16: 6: 3 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4724C37B401 for ; Tue, 15 Oct 2002 16:06:02 -0700 (PDT) Received: from viefep14-int.chello.at (viefep14-int.chello.at [213.46.255.13]) by mx1.FreeBSD.org (Postfix) with ESMTP id AA94243E6A for ; Tue, 15 Oct 2002 16:06:00 -0700 (PDT) (envelope-from ant@overclockers.at) Received: from Deadcell.ant ([212.17.108.240]) by viefep14-int.chello.at (InterMail vM.5.01.05.12 201-253-122-126-112-20020820) with ESMTP id <20021015230559.UDSS29435.viefep14-int.chello.at@Deadcell.ant> for ; Wed, 16 Oct 2002 01:05:59 +0200 Received: from Deadcell.ant (localhost [127.0.0.1]) by Deadcell.ant (8.12.6/8.12.6) with ESMTP id g9FN5w4i030872 for ; Wed, 16 Oct 2002 01:05:59 +0200 (CEST) (envelope-from ant@Deadcell.ant) Received: (from ant@localhost) by Deadcell.ant (8.12.6/8.12.6/Submit) id g9FN5rdA030871 for freebsd-questions@freebsd.org; Wed, 16 Oct 2002 01:05:53 +0200 (CEST) Date: Wed, 16 Oct 2002 01:05:53 +0200 From: Andreas Ntaflos To: freebsd-questions@freebsd.org Subject: strange reboot, permissions of /sbin/reboot Message-ID: <20021015230553.GA30542@Deadcell.ant> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.4i X-Operating-System: FreeBSD 4.7-STABLE i386 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hello list, Something strange just occured on a quite busy server running FreeBSD 4.6-RC as of May 28. First, it seemed to have suddenly rebooted, but not by a kernel trap or anything like it, the machine has been up for over 120 days, running smoothly. We checked the logs, seeing that it was rebooted by an ordinary user (all.log) which comes quite strange to me. # ls /sbin/reboot -r-xr-xr-x 4 root wheel - 233708 Jan 19 2002 /sbin/reboot* First I thought someone messed up things bigtime, but checking my system shows me the same permissions for /sbin/reboot, despite the fact that an ordinary user on my system can NOT reboot or shutdown anything. We issued a reboot again as a normal user, just to make sure it was not a mistake and it did reboot again. It also seems that the first reboot was not initiated by a user. I am a little confused...how could that happen? My questions are: what catches the execution of /sbin/reboot for normal users and how could it happen that the normal user was not caught in that case? Also, how come that the permissions on reboot and shutdown are the way they are? Can someone point me to some relevant pieces of information? TIA regards & good night -- Andreas "ant" Ntaflos ant@overclockers.at Vienna, AUSTRIA To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message