<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 07/10/2014 07:21 AM, Anders Bruun
Olsen wrote:<br>
</div>
<blockquote
cite="mid:CAFJm-UOm1o26Pij81gcP2UuEp5xvu2TEhK=735KCKPs9DKankw@mail.gmail.com"
type="cite">
<div dir="ltr">Hi,
<div><br>
</div>
<div>I am looking to build a new terminal server for remote
desktops which will be accessed through NoMachine Enterprise.
Lubuntu and LXDE looks like a nice fit, but I have run into a
couple of issues.</div>
<div><br>
</div>
<div>I have a default install of Lubuntu 14.04 64-bit. I have
created a non-privileged user (no sudo rights). I have also
installed NoMachine Enterprise Server. First thing I
discovered was what I would almost call a security issue. When
my non-privileged user is logged in remotely (with Nomachine
Enterprise Client), choosing shutdown in the logout dialog
actually does shut down the server. How can this user shut
down the server, without root access? I found out, that if I
ensure lightdm isn't running (nobody will login locally), my
unprivileged user can't shut down the server, but will be
asked for the password to a privileged user, so I guess this
is an issue with lightdm. Is this really intended behavior?</div>
<div><br>
</div>
<div>Next up, I would like to hide the shutdown and reboot
buttons in the logout dialog. The only way I have been able to
find by searching, is to actually change the source code for
lxsession-logout and recompile. Is there really no other way
to hide those buttons?</div>
<div>
<div><br>
</div>
-- <br>
Anders Bruun Olsen<br>
It-ansvarlig<br>
Det Danske Sprog- og Litteraturselskab<br>
(Society for Danish Language and Literature)<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
Hi Anders!<br>
The commands for shutting down, and rebooting are sudo commands.
(sudo shutdown -h now or sudo reboot) However certain programs are
granted access to run these commands from root. So it should be
possible to not allow those programs to shutdown without a
password. This also includes the lxsession-logout. Can the
unprivaleged user run the logout dialog and shutdown from there as
well (this is the power button on the panel, unless you have removed
it).<br>
<br>
Unfortunately I cannot remember right this moment what grants these
programs access to run those commands without need a user password.
But this might give you something to search for. There are some
people on this list who may be able to clarify what I am getting at,
and may even know how this is done specifically.<br>
<br>
On the other hand, there are other login managers such as SLIM. You
may need to configure it a bit to get it looking the way you want
and have the options you want, but that might be the easier choice,
unless the logout dialog can let the user shutdown the server as
well...<br>
<br>
<pre class="moz-signature" cols="72">--
Regards</pre>
</body>
</html>