What is the correct way to shutdown OpenBSD from XFCE ?

[bsd007]

What is the correct way to shut down OpenBSD from XFCE ?

I launched terminal then su to root the ran

shutdown now

What happened is it killed the Xserver then again presented me a promt.

I don't remember the exact output. I will have to try n shutdown again and check.

[Head_on_a_Stick]

I use dwm rather than xfce but pressing the power button always works on my laptop, OpenBSD's acpi support is excellent

[bsd007]

Originally Posted by Head_on_a_Stick

I use dwm rather than xfce but pressing the power button always works on my laptop, OpenBSD's acpi support is excellent

You are right. I just pressed the power button and it shutdown cleanly.

Thanks a lot.

[LeFrettchen]

I use the terminal :

$ doas halt -p

[bsd007]

Originally Posted by LeFrettchen

I use the terminal :

$ doas halt -p

Thanks for sharing. I will try it out.

[sacerdos_daemonis]

# shutdown -p now

or

$ shutdown -p now

works fine as well. The first if logged into the root account, the second if the user has permission to execute the shutdown command.

[bsd007]

Originally Posted by sacerdos_daemonis

# shutdown -p now

or

$ shutdown -p now

works fine as well. The first if logged into the root account, the second if the user has permission to execute the shutdown command.

I tried it without the -p but it didn't work. I will try with -p. Thanks for replying.

[new2BSDlol]

Originally Posted by sacerdos_daemonis

# shutdown -p now

or

$ shutdown -p now

works fine as well. The first if logged into the root account, the second if the user has permission to execute the shutdown command.

How do I give the user permission to run the shutdown command? I have "permit nopass username cmd shutdown" in /etc/doas.conf, but not having to use doas would be fine.

[sacerdos_daemonis]

I use

# usermod -G operator name_of_user

when configuring USB mounting while following this guide http://daemonforums.org/showthread.php?t=2232
One benefit is it also gives the user shutdown privileges.

[jggimi]

It also gives the user read access to drive devices, in order to conduct dump(8) backups. This bypasses filesystem read security, and should be carefully considered if the user runs untrusted code -- such as a browser running javascript from a website.

[new2BSDlol]

Right, thanks. At the moment my doas.conf is:

permit persist :wheel
permit nopass openbsd63user cmd mount
permit nopass openbsd63user cmd umount
permit nopass openbsd63user cmd find
permit nopass openbsd63user cmd disklabel
permit nopass openbsd63user cmd syspatch
permit nopass openbsd63user cmd shutdown
permit nopass openbsd63user cmd reboot
permit nopass openbsd63user cmd ntpd

Would you consider any of those to be an obvious security vulnerability (I was told off for using sudo in a screenshot that I posted on 4chan /g/ in BSD general and advised to switch to doas... someone commented that sudo is susceptible to subtle misconfiguration errors)?

[TronDD]

You have to be very careful with your rules.

doas is a much smaller codebase that is setuid root than sudo is. That's one of the benefits. But either one could mistakenly give root access you didn't intend.

Try

doas find <some file that exists> -exec /bin/ksh \;

And see if that is what you want to allow to happen.

[new2BSDlol]

Originally Posted by TronDD

Try

doas find <some file that exists> -exec /bin/ksh \;

And see if that is what you want to allow to happen.

Hahah ok, removing that line from doas.conf...

I just knew I'd make a dumb mistake...

[shep]

The README for Xfce4 has information on using consolekit/polkit to shutdown from the menu.
http://cvsweb.openbsd.org/cgi-bin/cv...kg/README-main

Logging out and shutting down the computer
==========================================
If your installation supports complete shutdown, clicking on the logout
button on panel will permit you to either logout, rebooting or halt
the computer.

Halting and rebooting require consolekit2 and polkit: you'll need to run
a systemwide D-BUS service (add messagebus to pkg_scripts in
rc.conf.local) and pass --with-ck-launch argument to startxfce4. If you
run a systemwide D-BUS service, have consolekit2/polkit installed and
don't use --with-ck-launch you will not be able to shutdown/reboot.

The same file should be on your system at /usr/local/share/doc/pkg-readmes/

Edit: I recall that you also need to add your user to the operator group.

[johnR]

Originally Posted by new2BSDlol

How do I give the user permission to run the shutdown command? I have "permit nopass username cmd shutdown" in /etc/doas.conf, but not having to use doas would be fine.

It's simpler to use the 'halt' command:

$ doas halt -p

I have the following line in /etc/doas.conf:

permit nopass username as root cmd halt args -p

If you need to use doas to execute a command with specific arguments (as above) you need to specify them with the 'args' keyword in doas.conf. See 'man doas.conf'.