Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.misc > #1035
| From | Michael Black <et472@ncf.ca> |
|---|---|
| Newsgroups | comp.os.linux.misc |
| Subject | Re: who issued the shutdown command? |
| Date | 2011-05-06 10:48 -0400 |
| Organization | National Capital Freenet, Ottawa, Ontario, Canada |
| Message-ID | <Pine.LNX.4.64.1105061045300.15316@darkstar.example.net> (permalink) |
| References | <ipsd48$2vo$3@dont-email.me> <4dc3e7bc$0$36573$edfadb0f@dtext01.news.tele.dk> <vadd98x6ek.ln2@news.homelinux.net> |
On Fri, 6 May 2011, Balwinder S Dheeman wrote: > On 05/06/2011 05:51 PM, DenverD wrote: >> On 05/04/2011 10:32 PM, Todd wrote: >>> Hi All, >>> >>> In /var/log/messages, I have: >>> >>> May 4 08:01:11 server shutdown[10435]: shutting down for system reboot >>> >>> "last" shows everyone logged out at the time. >>> >>> Question: who done it? >> >> the one with the root password! > > On many/most systems an ACPI daemon can also run script (which might invoke > shutdown command) on press of power of/off button :P > The problem with that is, there's no way of knowing who did it then. Since the original question seemed reasonable, "the one with the root password" is the obvious answer. No other user can do it unless something odd has been set up. ONce talk begins of physical access, then there's no trace unless someone has security cameras or does fingerprints on the button. Michael
Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
who issued the shutdown command? Todd <Todd@invalid.com> - 2011-05-04 13:32 -0700
Re: who issued the shutdown command? Lew Pitcher <lpitcher@teksavvy.com> - 2011-05-04 16:41 -0400
Re: who issued the shutdown command? Chris Davies <chris-usenet@roaima.co.uk> - 2011-05-04 23:40 +0100
Re: who issued the shutdown command? Keith Keller <kkeller-usenet@wombat.san-francisco.ca.us> - 2011-05-04 17:03 -0700
Re: who issued the shutdown command? unruh <unruh@wormhole.physics.ubc.ca> - 2011-05-04 22:36 +0000
Re: who issued the shutdown command? DenverD <spam.trap@SOMEwhere.dk> - 2011-05-06 14:21 +0200
Re: who issued the shutdown command? Balwinder S Dheeman <bsd.SANSPAM@anu.homelinux.net> - 2011-05-06 20:01 +0530
Re: who issued the shutdown command? Michael Black <et472@ncf.ca> - 2011-05-06 10:48 -0400
Re: who issued the shutdown command? The Natural Philosopher <tnp@invalid.invalid> - 2011-05-06 16:28 +0100
Re: who issued the shutdown command? unruh <unruh@wormhole.physics.ubc.ca> - 2011-05-06 16:54 +0000
Re: who issued the shutdown command? Todd <Todd@invalid.com> - 2011-05-06 13:53 -0700
Re: who issued the shutdown command? Robert Riches <spamtrap42@jacob21819.net> - 2011-05-07 03:24 +0000
Re: who issued the shutdown command? GangGreene <GangGreene@invalid.com> - 2011-05-07 15:43 -0400
csiph-web