On Fri, 17 Feb 2012 09:42:20 +0800 Leon Feng wrote: > Maybe there is something wrong with ConsoleKit, KDM will take care of > it automatically. Without a display manager, some time in the last few months you now seem to have to add permissions for shutdown and suspend to console kit. Variations of .xinitrc no longer seem to have an effect. Linux hardly has a clear and concise permission model these days increasing the likelihood of an admin missing something. Sudo or even RBAC are easier to be sure of and so far atleast I don't see the argument/usefulness as there are groups/secondary groups and DAC and sudo can be very powerful and fine grained when used right and for Local/remote there is firewall options,ssh options, tcpwrappers etc.. -- Kc
