> If let users run xfsm-shutdown-helper through sudo (no matter if > passwords are asked), then anyone using the machine through network > will be able to shut it down, isn't it? No, check out the sudoers man page. You can allow specific groups, specific users, users on the local machine only, etc.