xfsm-shutdown-helper sudo error messages

[Erik Harrison]

On 5/23/05, J. Lewis Muir <jlmuir at anl.gov> wrote:
> Brian J. Tarricone wrote:
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> >
> > J. Lewis Muir wrote:
> >
> >
> >>I don't want to allow users to shutdown or reboot the computer when
> >>they log out of their desktop session.
> >>
> >>By default, the radio buttons on the logout dialog box are grayed
> >>out -- this is the behavior I want. But every time a user logs out
> >>I get a syslog entry from sudo saying "command not allowed" where
> >>the command is a full path to xfsm-shutdown-helper.
> >
> >
> > I believe this is normal.  xfce4-session runs this (using sudo) to
> > check to see if it should enable the shutdown/reboot radio items.
> >
> >
> >>So my guess is that Xfce is invoking this command via sudo. I don't
> >>want to add an entry for this to my sudoers file; I don't want to
> >>allow users to shutdown or reboot the computer.
> >
> >
> > Sure, then don't.  Why do you think you need to?
> 
> I don't want to see the sudo errors in my security log.

I suppose we could parse the output of sudo -l to determine if the
shutdown options are available. That sets off some alarm bells for
some reason to me. Probably because it breaks the authentication
abstraction that allows the session manager to be customized to
whatever system the OS has for getting extended privs.

Regardless, it could probably be done. However it will not be done in
the stable series, so for now you'll just have to live with the
messages in your log.

> -lewis
> 
> >     -brian
> >
> >
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.1 (MingW32)
> >
> > iD8DBQFCkjxC6XyW6VEeAnsRAqijAJwODtLXAxfz3V2CsoXJJpq6CvdClgCg46wC
> > K15arp46BTrQeBK4VCzGkTs=
> > =AX18
> > -----END PGP SIGNATURE-----
> >
> > _______________________________________________
> > Xfce mailing list
> > Xfce at xfce.org
> > http://foo-projects.org/mailman/listinfo/xfce
> > http://www.xfce.org
> >
> >
> 
> _______________________________________________
> Xfce mailing list
> Xfce at xfce.org
> http://foo-projects.org/mailman/listinfo/xfce
> http://www.xfce.org
> 


-- 
"This brings me back to a time where I had no worries. 
All I needed to do was watch Perfect Strangers."
-Erik