Bugtraq mailing list archives

Re: linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot

From: marcelo () MENDOZA GOV AR (Marcelo Roccasalva)
Date: Wed, 21 Jul 1999 17:56:49 -0300


On Wed, Jun 30, 1999 at 11:32:14PM +0100, Domingos Bruges wrote:

Greetings you all,

I'm not sure that what I'm about the say does really work, but i've
tested it successfully in 3 RedHat 6.0 boxes with (1.14 - subrev 4).

If you use linuxconf  in order to create / edit any user
system priviledges, you may notice that if you set a user to have Denied
priviledges on the shutdown command he can stil be able to reboot / shutdown it.
It seems that linuxconf isn't dealing correctly with /etc/pam.d/reboot


Linuxconf shutdown options has to do with shutting down the system from it's
graphical interface or with linuxconf --shutdown. It doesn't deal with
distribution specific way of limitting shutdown... maybe it should, anyway...

--
Marcelo

Current thread:

Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 14)
- linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Domingos Bruges (Jun 30)
  - Re: linuxconf doesn't seem to deal correctly with /etc/pam.d/reboot Marcelo Roccasalva (Jul 21)
- Re: ircd exploit in ircu based code (fwd) Matt Hallacy (Jul 15)
  - Re: ircd exploit in ircu based code (fwd) Andrea Cocito (Jul 16)
- Logic Error in Management Edition NetWare install script for Dr. Sololomon's Bayard G. Bell (Jul 16)
- AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 16)
  - CERT Advisory CA-99.08 - cmsd Aleph One (Jul 16)
  - Re: AMaViS virus scanner for Linux - root exploit Kurt Seifried (Jul 17)
    - Re: AMaViS virus scanner for Linux - root exploit Ian Whalley (Jul 19)
  - Swish-e Jean-Georges Estiot (Jul 17)
  - Re: AMaViS virus scanner for Linux - root exploit Chris McDonough (Jul 18)
    - Re: AMaViS virus scanner for Linux - root exploit Jim Hebert (Jul 19)

(Thread continues...)