topic Re: reboot in Operating System - HP-UX

reboot

vladimir gershman — Wed, 23 Apr 2003 16:22:14 GMT

Hello,

How does one allow a user to issue /etc/reboot? Is there such a thing as reboot.allow?

Thanks,

Vlad

Re: reboot

Mark Greene_1 — Wed, 23 Apr 2003 16:30:26 GMT

Download and install sudo:

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.6/

You can then give root-equivalent access on an individual command basis to specific users. Plus all their activity is logged, so if they are abusing the priviledge, you will know about it.

HTH
mark

Re: reboot

S.K. Chan — Wed, 23 Apr 2003 16:36:00 GMT

No (as far as I know) ..
You can use the shutdown command instead with the "-r" (reboot) option.
# shutdown -r 0
Create the /etc/shutdown.allow file and the format is ..
systemname username
Check ..
# man 1m shutdown
for details.

Re: reboot

harry d brown jr — Wed, 23 Apr 2003 16:36:36 GMT

1) Unless you know what and why you are rebooting, then DO NOT USE /etc/reboot!

2) Use /etc/shutdown.allow to authorize shutdowns and rebooting for NON-root users!

Do a man on shutdown:

man 1m shutdown

live free or die
harry

Re: reboot

Hai Nguyen_1 — Wed, 23 Apr 2003 16:39:05 GMT

Vlad,

You can use "sam -r" to allow a non-root user to reboot. man sam for more details.

Hai

Re: reboot

vladimir gershman — Wed, 23 Apr 2003 16:49:02 GMT

Actually, I wanted to know if I can do this without sudo. I know I can allow certain users to do "shutdown" using shutdown.allow file, but is there such thing as reboot.allow?

thanks

Re: reboot

Hai Nguyen_1 — Wed, 23 Apr 2003 16:51:11 GMT

Vlad,

There is no such file.

Hai

Re: reboot

Paul Sperry — Wed, 23 Apr 2003 16:58:45 GMT

Dude

reboot is the worst command you can use!!!

Stick with shutdown -r

NEVER use reboot unless your looking for trouble ;)

Re: reboot

harry d brown jr — Wed, 23 Apr 2003 17:18:11 GMT

If you allow a use to use /etc/reboot, you might as well just let them kill -9 0.

Again, I can't stress enough how important it is to use shutdown over /etc/reboot!

And hopefully you have a make_tape_recovery available if you want to continue using reboot.

live free or die
harry

Re: reboot

Helen French — Wed, 23 Apr 2003 17:21:08 GMT

Some points:
1) There is no such file to allow or deny access to reboot command.
2) Since reboot will not take a proper "reboot" of the system with shutting down all processes and applications, stick with shutdown -r command which will shutdown all applications properly and then do a reboot. Reboot will immediately reset the system. The advantage is you can configure your users in shutdown.allow file.
3) By default only root will be allowed to execute the command reboot.

Re: reboot

Kelli Ward — Wed, 23 Apr 2003 18:07:09 GMT

Hi,
Don't let your users reboot. (I.e. sudo)
shutdown.allow and
shutdown -y -h now or:
shutdown -y -r now

will allow a user to gracefully shutdown a system without waiting the 60 seconds or sending a message if your worried about time.

If other users are logged on they might be upset if they don't have time to log off, but it is do able and is only a number of seconds longer than (and much safer than) reboot without the -q option.

HTH,
Kel

Re: reboot

vladimir gershman — Thu, 24 Apr 2003 12:06:26 GMT

Got my answer. Thank you all.