Re: who issued the shutdown command?

From	GangGreene <GangGreene@invalid.com>
Newsgroups	comp.os.linux.misc
Subject	Re: who issued the shutdown command?
Date	2011-05-07 15:43 -0400
Organization	A noiseless patient Spider
Message-ID	<evjg98-07p.ln1@crazy-horse.bildanet.com> (permalink)
References	<ipsd48$2vo$3@dont-email.me> <4dc3e7bc$0$36573$edfadb0f@dtext01.news.tele.dk> <vadd98x6ek.ln2@news.homelinux.net> <Pine.LNX.4.64.1105061045300.15316@darkstar.example.net> <slrnis89tj.nsb.unruh@wormhole.physics.ubc.ca>

Show all headers | View raw

unruh wrote:

> On 2011-05-06, Michael Black <et472@ncf.ca> wrote:
>> On Fri, 6 May 2011, Balwinder S Dheeman wrote:
>>
>>> On 05/06/2011 05:51 PM, DenverD wrote:
>>>> On 05/04/2011 10:32 PM, Todd wrote:
>>>>> Hi All,
>>>>> 
>>>>> In /var/log/messages, I have:
>>>>> 
>>>>> May 4 08:01:11 server shutdown[10435]: shutting down for system reboot
>>>>> 
>>>>> "last" shows everyone logged out at the time.
>>>>> 
>>>>> Question: who done it?
>>>> 
>>>> the one with the root password!
>>>
>>> On many/most systems an ACPI daemon can also run script (which might
>>> invoke shutdown command) on press of power of/off button :P
>>>
>> The problem with that is, there's no way of knowing who did it then.
>>
>> Since the original question seemed reasonable, "the one with the root
>> password" is the obvious answer. No other user can do it unless something
>> odd has been set up.
>>
>> ONce talk begins of physical access, then there's no trace unless someone
>> has security cameras or does fingerprints on the button.
> 
> Alt-ctrl-del from the keyboard could do it, even if noone is logged on.
> Halt run from a console could do it even by a user ( but they should be
> logged on) (At elast on my system, halt can be run by users).
> 
> 
>>
>>    Michael


/etc/inittab

....

#ca::ctrlaltdel:/sbin/shutdown -t3 -r now


Not on my systems

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Find similar

Thread

who issued the shutdown command? Todd <Todd@invalid.com> - 2011-05-04 13:32 -0700
  Re: who issued the shutdown command? Lew Pitcher <lpitcher@teksavvy.com> - 2011-05-04 16:41 -0400
    Re: who issued the shutdown command? Chris Davies <chris-usenet@roaima.co.uk> - 2011-05-04 23:40 +0100
      Re: who issued the shutdown command? Keith Keller <kkeller-usenet@wombat.san-francisco.ca.us> - 2011-05-04 17:03 -0700
  Re: who issued the shutdown command? unruh <unruh@wormhole.physics.ubc.ca> - 2011-05-04 22:36 +0000
  Re: who issued the shutdown command? DenverD <spam.trap@SOMEwhere.dk> - 2011-05-06 14:21 +0200
    Re: who issued the shutdown command? Balwinder S Dheeman <bsd.SANSPAM@anu.homelinux.net> - 2011-05-06 20:01 +0530
      Re: who issued the shutdown command? Michael Black <et472@ncf.ca> - 2011-05-06 10:48 -0400
        Re: who issued the shutdown command? The Natural Philosopher <tnp@invalid.invalid> - 2011-05-06 16:28 +0100
        Re: who issued the shutdown command? unruh <unruh@wormhole.physics.ubc.ca> - 2011-05-06 16:54 +0000
          Re: who issued the shutdown command? Todd <Todd@invalid.com> - 2011-05-06 13:53 -0700
          Re: who issued the shutdown command? Robert Riches <spamtrap42@jacob21819.net> - 2011-05-07 03:24 +0000
          Re: who issued the shutdown command? GangGreene <GangGreene@invalid.com> - 2011-05-07 15:43 -0400

csiph-web