From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-163123-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id B1DBC138CC5
	for <garchives@archives.gentoo.org>; Sun, 22 Mar 2015 23:19:02 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id A8199E0872;
	Sun, 22 Mar 2015 23:18:57 +0000 (UTC)
Received: from plane.gmane.org (plane.gmane.org [80.91.229.3])
	(using TLSv1 with cipher AES256-SHA (256/256 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 8C08FE07C7
	for <gentoo-user@lists.gentoo.org>; Sun, 22 Mar 2015 23:18:55 +0000 (UTC)
Received: from list by plane.gmane.org with local (Exim 4.69)
	(envelope-from <lnx-gentoo-user@m.gmane.org>)
	id 1YZp8s-0002ia-NB
	for gentoo-user@lists.gentoo.org; Mon, 23 Mar 2015 00:18:50 +0100
Received: from athedsl-232940.home.otenet.gr ([85.74.229.138])
        by main.gmane.org with esmtp (Gmexim 0.1 (Debian))
        id 1AlnuQ-0007hv-00
        for <gentoo-user@lists.gentoo.org>; Mon, 23 Mar 2015 00:18:50 +0100
Received: from realnc by athedsl-232940.home.otenet.gr with local (Gmexim 0.1 (Debian))
        id 1AlnuQ-0007hv-00
        for <gentoo-user@lists.gentoo.org>; Mon, 23 Mar 2015 00:18:50 +0100
X-Injected-Via-Gmane: http://gmane.org/
To: gentoo-user@lists.gentoo.org
From: Nikos Chantziaras <realnc@gmail.com>
Subject: [gentoo-user] Re: How to poweroff the system from user?
Date: Mon, 23 Mar 2015 01:18:30 +0200
Organization: Lucas Barks
Message-ID: <menik6$vs4$1@ger.gmane.org>
References: <20150321152656.a82a84b3e8a32c8b68554548@gmail.com> <2098241.ygyfAjpUPx@wstn> <mem7kc$jth$1@ger.gmane.org> <1973791.yPhV807uKP@wstn> <20150322155852.GA1081@ca.inter.net> <men497$55b$1@ger.gmane.org> <20150322201204.GB1081@ca.inter.net>
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
Mime-Version: 1.0
Content-Type: text/plain; charset=windows-1252; format=flowed
Content-Transfer-Encoding: 7bit
X-Complaints-To: usenet@ger.gmane.org
X-Gmane-NNTP-Posting-Host: athedsl-232940.home.otenet.gr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:31.0) Gecko/20100101 Thunderbird/31.5.0
In-Reply-To: <20150322201204.GB1081@ca.inter.net>
X-Archives-Salt: cf3aa602-dd13-447a-80b2-534e9d9cb39a
X-Archives-Hash: 58b7c7c4d9c1a051ce37d05c27476a56

On 22/03/15 22:12, Philip Webb wrote:
> 150322 Nikos Chantziaras wrote:
>> On 22/03/15 17:58, Philip Webb wrote:
>>> If you have multiple users,
>>> you don't want some rogue user rebooting randomly
>> You can't stop a local user from doing that.
>> As mentioned, the reset button works just fine.  You really do want
>> those users to reboot the system properly rather than pressing reset.
>> Environments where the machine is locked away
>> with only the keyboard being accessible are far less common
>> than people sitting in front of the actual machine.
>
> We're picturing different set-ups : I'm thinking of a campus system,
> where the machine is in a locked room accessible to the sysadmin (root)
> & users log in somewhere else via machines which act as terminals ;
> you are perhaps refering to a family or small-office machine,
> where there are no other means of access, but users log in separately.
> You are correct in the latter case.

Well, remote logins can't reboot with ctrl+alt+del. That's reserved only 
for the users using the actual console. Meaning the keyboard hooked up 
to the machine with the PS/2 or USB cable.

SSH login or thin clients can't reboot. If you press ctrl+alt+del on the 
terminal machine, that's only going to reboot the terminal machine. We 
had such a setup using Sun Rays in the past. Non-console logins are 
getting the full security treatment.