Adam Vande More amvandemore at gmail.com
Fri Dec 10 07:28:00 UTC 2010

On Fri, Dec 10, 2010 at 1:04 AM, Mark Andrews <marka at isc.org> wrote:

> When you have administered multi-user systems you learn to do things
> gracefully unless you actually need to do things abbruptly.

Yes I of course I use shutdown -r on a multi-user system in the rare times I
deal with one.  However that's not much of a reason not to have reboot in
the operator group, especially if you're like me in thinking the vast
majority of installs are single user type systems.  As the end of the day,
it's pretty trivial to me one way or the other but I do think the current
way is a POLA violation.

On Fri, Dec 10, 2010 at 1:10 AM, Rob Farmer <rfarmer at predatorlabs.net>wrote:

> I haven't thought about the situation in any detail, but nothing jumps
> out at me from the manpage.

shutdown will also pass the -n flag to reboot or halt as the man page
describes.  Also the simplest DoS from shutdown -p/h.  All I'm saying is
that if you're comfortable with the privs operator gives to the user, there
shouldn't be much qualms in granting reboot's functionality.

Looks like just mksnap_ffs and shutdown have operator grouping by default.

Adam Vande More

More information about the freebsd-stable mailing list