Re: [IPCop-devel] /etc/inittab

[Robert K. <Lit...@xs...>]

On Thu, 2005-06-30 at 14:01 +0200, Daniel Berlin wrote:
> Hi IPCops,
> the following line makes the ipcop machine reboot,
> when ctrl-alt-del is pressed (/etc/inittab).

> ca::ctrlaltdel:/sbin/shutdown -r now

> This can be done by everybody, who has access to the
> ipcop's keyboard. But in my opinion only root (and admin)
> should be allowed to reboot or shutdown the machine?!

You can't stop someone with physical access being able to reboot or
shutdown the machine, they can just use the power button on the case or
pull the power cord. Indeed anyone with physical access can get root
access by removing the harddrive and reading/changing it on another
machine. If you don't trust people with physical access then you need to
move the system to a more secure location.

Allowing someone with keyboard access to cleanly reboot the machine can
be quite useful. If there's a problem at a remote office you can tell
someone there to hit ctrl-alt-delete instead of having to drive up
there, log in, and reboot manually.

-- 
 Robert Kerr