xfsm-shutdown-helper sudo error messages

J. Lewis Muir jlmuir at anl.gov
Tue May 24 01:03:06 CEST 2005


Erik Harrison wrote:
> On 5/23/05, J. Lewis Muir <jlmuir at anl.gov> wrote:
> 
>>Brian J. Tarricone wrote:
>>
>>>-----BEGIN PGP SIGNED MESSAGE-----
>>>Hash: SHA1
>>>
>>>J. Lewis Muir wrote:
>>>
>>>
>>>
>>>>I don't want to allow users to shutdown or reboot the computer when
>>>>they log out of their desktop session.
>>>>
>>>>By default, the radio buttons on the logout dialog box are grayed
>>>>out -- this is the behavior I want. But every time a user logs out
>>>>I get a syslog entry from sudo saying "command not allowed" where
>>>>the command is a full path to xfsm-shutdown-helper.
>>>
>>>
>>>I believe this is normal.  xfce4-session runs this (using sudo) to
>>>check to see if it should enable the shutdown/reboot radio items.
>>>
>>>
>>>
>>>>So my guess is that Xfce is invoking this command via sudo. I don't
>>>>want to add an entry for this to my sudoers file; I don't want to
>>>>allow users to shutdown or reboot the computer.
>>>
>>>
>>>Sure, then don't.  Why do you think you need to?
>>
>>I don't want to see the sudo errors in my security log.
> 
> 
> I suppose we could parse the output of sudo -l to determine if the
> shutdown options are available. That sets off some alarm bells for
> some reason to me. Probably because it breaks the authentication
> abstraction that allows the session manager to be customized to
> whatever system the OS has for getting extended privs.
> 
> Regardless, it could probably be done. However it will not be done in
> the stable series, so for now you'll just have to live with the
> messages in your log.

OK.

Or even just an env var to tell it not to do the sudo test.

But I would have thought the kiosk mode change I made would have worked. 
If I have set "Shutdown=NONE" for xfce4-session, why would it still be 
doing anything w/ sudo?

Thanks,

-lewis

> 
>>-lewis
>>
>>
>>>    -brian
>>>
>>>
>>>-----BEGIN PGP SIGNATURE-----
>>>Version: GnuPG v1.4.1 (MingW32)
>>>
>>>iD8DBQFCkjxC6XyW6VEeAnsRAqijAJwODtLXAxfz3V2CsoXJJpq6CvdClgCg46wC
>>>K15arp46BTrQeBK4VCzGkTs=
>>>=AX18
>>>-----END PGP SIGNATURE-----
>>>
>>>_______________________________________________
>>>Xfce mailing list
>>>Xfce at xfce.org
>>>http://foo-projects.org/mailman/listinfo/xfce
>>>http://www.xfce.org
>>>
>>>
>>
>>_______________________________________________
>>Xfce mailing list
>>Xfce at xfce.org
>>http://foo-projects.org/mailman/listinfo/xfce
>>http://www.xfce.org
>>
> 
> 
> 




More information about the Xfce mailing list