Disabling user access to shutdown/reboot on Gnome logout
Cornelius Henderson
Kernel: Linux lx3-nhdr 2.4.20-28.7smp
When a normal user logs out of Gnome desktop, they are presented with a
menu with Log Out, Shutdown, and Reboot radio buttons. I would very much
like to remove this option.
RedHat's official reference guide says that pam and usermode control
this mechanism:
However, using pam-0.75-46.7.2 and usermode-1.46-1 and following this
guide...the options are still there. I have tried only editing the
associated PAM files:
/etc/pam.d/halt
/etc/pam.d/poweroff
/etc/pam.d/reboot
to NOT use pam_console like so:
#%PAM-1.0
auth sufficient /lib/security/pam_rootok.so
#auth required /lib/security/pam_console.so
#auth required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_permit.so
I also tried only removing the halt, poweroff, and reboot files from
/etc/security/console.apps as described in the guide. I have also tried
both the "PAM method" and the "removing the files" methods together.
None of these methods seem to work for me. For each method and
combination of methods, I have tried restarting GDM and X (if that makes
any difference). I have also tried replacing pam_permit with pam_deny in
the associated PAM files. Still no luck.
Any help removing these options would be greatly appreciated.