* [gentoo-user] System shutdown from within Xfce
@ 2006-01-04 13:26 Michael Kjorling
0 siblings, 0 replies; 6+ messages in thread
From: Michael Kjorling @ 2006-01-04 13:26 UTC (permalink / raw
To: gentoo-user
[-- Attachment #1: Type: text/plain, Size: 1887 bytes --]
I run Xfce 4.2.3.2 and want to be able to shut down my system from
within X. At the moment I have to log in as root and then issue a
shutdown command, but Xfce is supposed to support doing this through
the GUI.
Looking around turned up the Xfce documentation and specifically
<http://www.xfce.org/documentation/docs-4.2/xfce4-session.html#xfsm-shutdown>,
which says I need sudo and the right to execute xfsm-shutdown-helper
as root. OK, so I emerged app-admin/sudo and added the following line
at the end of /etc/sudoers using visudo:
%wheel vuk=/usr/libexec/xfsm-shutdown-helper NOPASSWD
(Those are tabs.) My system is named vuk, I am a member of the wheel
group, and /etc/hosts says:
vuk ~ # grep vuk /etc/hosts
127.0.0.1 vuk.kjorling.com vuk localhost
::1 ip6-localhost vuk ip6-loopback
vuk ~ #
Still, trying "sudo /usr/libexec/xfsm-shutdown-helper" from the
command line gives me:
michael@vuk ~ $ sudo /usr/libexec/xfsm-shutdown-helper
Password: (trying the root password)
Sorry, try again.
Password: (^C)
sudo: 1 incorrect password attempt
michael@vuk ~ $ sudo /usr/libexec/xfsm-shutdown-helper
Password: (trying my own password)
Sorry, user michael is not allowed to execute '/usr/libexec/xfsm-shutdown-helper' as root on vuk.
michael@vuk ~ $
...and the options to shut down or reboot are still grayed out in the
Xfce quit dialog box.
I checked /etc/group and did not find any obvious group I should add
myself to (say, `sudoers' or something like that). I use PAM and
/etc/pam.d/sudo (autogenerated) uses system-auth for auth, account,
password and session.
Am I missing something here?
--
Michael Kjörling, michael@kjorling.com - http://michael.kjorling.com/
* ASCII Ribbon Campaign: Against HTML Mail, Proprietary Attachments *
* ..... No bird soars too high if he soars with his own wings ..... *
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [gentoo-user] System shutdown from within Xfce
@ 2006-01-04 13:43 brettholcomb
2006-01-04 14:07 ` John Jolet
0 siblings, 1 reply; 6+ messages in thread
From: brettholcomb @ 2006-01-04 13:43 UTC (permalink / raw
To: gentoo-user
You have to set yourself up to be able do shutdown and reboot if desired. Do this in the sudoers file. I don't have my setup where I can reach it at this moment but if you need I can post it later tonight.
>
> From: Michael Kjorling <michael@kjorling.com>
> Date: 2006/01/04 Wed AM 08:26:16 EST
> To: gentoo-user@lists.gentoo.org
> Subject: [gentoo-user] System shutdown from within Xfce
>
>
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: [gentoo-user] System shutdown from within Xfce
2006-01-04 13:43 [gentoo-user] System shutdown from within Xfce brettholcomb
@ 2006-01-04 14:07 ` John Jolet
[not found] ` <43bbfda0.52c312c6@vuk.kjorling.com>
0 siblings, 1 reply; 6+ messages in thread
From: John Jolet @ 2006-01-04 14:07 UTC (permalink / raw
To: gentoo-user
On Jan 4, 2006, at 7:43 AM, <brettholcomb@bellsouth.net> wrote:
> You have to set yourself up to be able do shutdown and reboot if
> desired. Do this in the sudoers file. I don't have my setup where
> I can reach it at this moment but if you need I can post it later
> tonight.
>
what you wanted was %wheel (root) shutdowncommand
what you put was let wheel group run the shutdown command as
vuk....you want to replace vuk with root.
>>
>> From: Michael Kjorling <michael@kjorling.com>
>> Date: 2006/01/04 Wed AM 08:26:16 EST
>> To: gentoo-user@lists.gentoo.org
>> Subject: [gentoo-user] System shutdown from within Xfce
>>
>>
>
> --
> gentoo-user@gentoo.org mailing list
>
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: SOLVED: [gentoo-user] System shutdown from within Xfce
[not found] ` <43bbfda0.52c312c6@vuk.kjorling.com>
@ 2006-01-04 17:09 ` John Jolet
2006-01-04 17:23 ` Michael Kjorling
0 siblings, 1 reply; 6+ messages in thread
From: John Jolet @ 2006-01-04 17:09 UTC (permalink / raw
To: gentoo-user
On Jan 4, 2006, at 10:53 AM, Michael Kjorling wrote:
> On 2006-01-04 08:07 -0600, john@jolet.net wrote:
>> what you put was let wheel group run the shutdown command as
>> vuk....you want to replace vuk with root.
>
> There we go, thank you! For the benefit of the archives, this is what
> I got in the end and which works (\t is tab):
>
> %wheel\tALL=(root)\tNOPASSWD: /usr/libexec/xfsm-shutdown-helper
>
> I can now shut down and reboot from within the GUI, and it doesn't
> seem to have opened any obvious other security holes.
>
well, except ANY user in your wheel group can shut down your
box.....not saying that's a bad thing, but you need to know who all
is in it...
> --
> Michael Kjörling, michael@kjorling.com - http://michael.kjorling.com/
> * ASCII Ribbon Campaign: Against HTML Mail, Proprietary Attachments *
> * ..... No bird soars too high if he soars with his own wings ..... *
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: SOLVED: [gentoo-user] System shutdown from within Xfce
2006-01-04 17:09 ` SOLVED: " John Jolet
@ 2006-01-04 17:23 ` Michael Kjorling
2006-01-04 17:27 ` John Jolet
0 siblings, 1 reply; 6+ messages in thread
From: Michael Kjorling @ 2006-01-04 17:23 UTC (permalink / raw
To: gentoo-user
[-- Attachment #1: Type: text/plain, Size: 730 bytes --]
On 2006-01-04 11:09 -0600, john@jolet.net wrote:
>> I can now shut down and reboot from within the GUI, and it doesn't
>> seem to have opened any obvious other security holes.
>
> well, except ANY user in your wheel group can shut down your
> box.....not saying that's a bad thing, but you need to know who all
> is in it...
Yes, I am perfectly aware of that and it is also what I want. Of
course my account is the only one besides root that is in the wheel
group, but that's my own headache. :)
--
Michael Kjörling, michael@kjorling.com - http://michael.kjorling.com/
* ASCII Ribbon Campaign: Against HTML Mail, Proprietary Attachments *
* ..... No bird soars too high if he soars with his own wings ..... *
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: SOLVED: [gentoo-user] System shutdown from within Xfce
2006-01-04 17:23 ` Michael Kjorling
@ 2006-01-04 17:27 ` John Jolet
0 siblings, 0 replies; 6+ messages in thread
From: John Jolet @ 2006-01-04 17:27 UTC (permalink / raw
To: gentoo-user
On Jan 4, 2006, at 11:23 AM, Michael Kjorling wrote:
> On 2006-01-04 11:09 -0600, john@jolet.net wrote:
>>> I can now shut down and reboot from within the GUI, and it doesn't
>>> seem to have opened any obvious other security holes.
>>
>> well, except ANY user in your wheel group can shut down your
>> box.....not saying that's a bad thing, but you need to know who all
>> is in it...
>
> Yes, I am perfectly aware of that and it is also what I want. Of
> course my account is the only one besides root that is in the wheel
> group, but that's my own headache. :)
>
sorry, too much time spent pointing out the obvious to management
lately :)
> --
> Michael Kjörling, michael@kjorling.com - http://michael.kjorling.com/
> * ASCII Ribbon Campaign: Against HTML Mail, Proprietary Attachments *
> * ..... No bird soars too high if he soars with his own wings ..... *
--
gentoo-user@gentoo.org mailing list
^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2006-01-04 17:52 UTC | newest]
Thread overview: 6+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-01-04 13:43 [gentoo-user] System shutdown from within Xfce brettholcomb
2006-01-04 14:07 ` John Jolet
[not found] ` <43bbfda0.52c312c6@vuk.kjorling.com>
2006-01-04 17:09 ` SOLVED: " John Jolet
2006-01-04 17:23 ` Michael Kjorling
2006-01-04 17:27 ` John Jolet
-- strict thread matches above, loose matches on Subject: below --
2006-01-04 13:26 Michael Kjorling
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox