Bug 960306

Summary: kdm does not honor sysconfig DISPLAYMANAGER_SHUTDOWN configuration
Product: [openSUSE] openSUSE Distribution Reporter: Dennis Golden <dgolden>
Component: KDE ApplicationsAssignee: E-Mail List <opensuse-kde-bugs>
Status: RESOLVED INVALID QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P5 - None CC: dgolden, wbauer
Version: Leap 42.1   
Target Milestone: ---   
Hardware: x86-64   
OS: openSUSE 42.1   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Attachments: kdmrc

Description Dennis Golden 2015-12-29 02:40:06 UTC
The kdm display manager ignores the sysconfig DISPLAYMANAGER_SHUTDOWN configuration. I have specified root as the only allowed user, but any user can shutdown or reboot the system. It is even being allowed from the greeter screen. This prevents me from being able to use Leap in a production environment.

I have found no work around for this bug.
Comment 1 Wolfgang Bauer 2015-12-29 11:29:23 UTC
(In reply to Dennis Golden from comment #0)
> The kdm display manager ignores the sysconfig DISPLAYMANAGER_SHUTDOWN
> configuration. I have specified root as the only allowed user, but any user
> can shutdown or reboot the system.

No, it doesn't any more, as we got (a lot of) bug reports that kdm doesn't respect certain settings in kdmrc (because it took them from /etc/sysconfig). So the usage of /etc/sysconfig/ got minimized in the last years.

See also:
Bug#267903



> I have found no work around for this bug.

Set the option AllowShutdown to your preferred value in /usr/share/kde4/config/kdm/kdmrc.
You should also be able to use YaST->Security and Users->Security Center and System Hardening to configure that, or KDE4's systemsettings (package kdebase4-workspace-addons).
Comment 2 Wolfgang Bauer 2015-12-29 11:34:52 UTC
PS: for the shutdown option, Bug#860507 is relevant in particular.
Comment 3 Dennis Golden 2015-12-29 16:29:03 UTC
Created attachment 660463 [details]
kdmrc
Comment 4 Dennis Golden 2015-12-29 16:31:38 UTC
Sometime between October 2014 and April 2015 an extra "AllowShutdown=All" got into the /usr/share/kde5/config/kdm/kdmrc file at line 524.

This bug also applies to openSUSE 13.2.

Regards,

Dennis
Comment 5 Ludwig Nussel 2017-01-04 09:41:40 UTC
*** Bug 1017977 has been marked as a duplicate of this bug. ***