su authentification

Shahab Shahsavari Alavidjeh zzgraph at gmail.com
Thu Sep 17 19:20:31 UTC 2015


I think this command should work without any restrictions
sudo systemctl poweroff

or maybe I'm not getting something here
On Thu, Sep 17, 2015 at 11:45:40AM -0700, Rick Stevens wrote:
> On 09/17/2015 11:32 AM, Joe Zeff wrote:
> >On 09/17/2015 11:08 AM, Zoltan Hoppar wrote:
> >>The problem is worse. This setup locks out as user  to do any su or
> >>sudo or shutdown manually. No reboot, nor shutdown command because the
> >>user even if has added to the sudoers list - it has been locked out me
> >>either. Any shutdown command fails and forcing the computer to
> >>hibernate. PS: I have Mate version.
> >>
> >>Just discovered this issue.
> >
> >Try this from a terminal:
> >
> >ls -l -Z /usr/sbin/poweroff
> >
> >For me, that returns this:
> >
> >[joe at barrayar ~]$ ls -l -Z /usr/sbin/poweroff
> >lrwxrwxrwx. root root system_u:object_r:bin_t:s0 /usr/sbin/poweroff ->
> >../bin/systemctl
> >
> >It's possible that either the permissions or the SELinux context is wrong.
> 
> Also check the SELinux and permissions of /bin/systemctl:
> 
> [root at prophead ~]# ls -l -Z /bin/systemctl
> -rwxr-xr-x. root root system_u:object_r:systemd_systemctl_exec_t:s0
> /bin/systemctl
> 
> Check your logs for SELinux avc errors.
> ----------------------------------------------------------------------
> - Rick Stevens, Systems Engineer, AllDigital    ricks at alldigital.com -
> - AIM/Skype: therps2        ICQ: 226437340           Yahoo: origrps2 -
> -                                                                    -
> -   UNIX is actually quite user friendly.  The problem is that it's  -
> -              just very picky of who its friends are!               -
> ----------------------------------------------------------------------
> -- 
> users mailing list
> users at lists.fedoraproject.org
> To unsubscribe or change subscription options:
> https://admin.fedoraproject.org/mailman/listinfo/users
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
> Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
> Have a question? Ask away: http://ask.fedoraproject.org


More information about the users mailing list