How come a standard (non-sudo) user can reboot my server?

0

I have RHEL 6.5 installed in VMware Workstation. When any normal user logs into the the virtual RHEL 6.5 server and runs reboot command, the server is rebooted. Normally, only users having sudo access or root can run reboot commands, and it is executed successfully.

What could be the possible reason that a normal user can login and reboot the system?

Manash Sharma

Posted 2014-11-26T04:11:37.410

Reputation: 11

How does your /etc/sudoers look like? – slhck – 2014-11-26T08:36:46.373

it looks like normal one.default setting defined then user and group access etc – Manash Sharma – 2014-11-26T10:12:47.500

What I meant was that you add the contents of that file to your question... Also, has this been like that all the time, or did you change anything? What groups is the user member of? Anything custom? – slhck – 2014-11-26T10:25:38.273

It was by chance I ran reboot as normal user and to my shock it worked. I believe it was there earlier also. In sudoers file no changes done. – Manash Sharma – 2014-11-26T10:29:14.463

Answers

1

If a user belongs to a group that has access to the reboot binary he can reboot...

Look for the user group(s) and his permissions on those files.

user622982

Posted 2014-11-26T04:11:37.410

Reputation:

Asked: 2014-11-26T04:11:37.410

Viewed: 132 times

Active: 2016-07-29T22:37:01.733