On 21 Sep 2017 17:10, "Valeri Galtsev" <galtsev@xxxxxxxxxxxxxxxxx> wrote:
Dear Experts,
"this is system from the hell!"
Than was my first reaction when I realized that logged in with GUI (X11)
user can turn off (and on) network interfaces. Without being in sudoers
file. Wow, this is scary to see on workstations I manage centrally. Even
though I did consider local user to be able to execute the command
"shutdown" (which distinguished RedHat and CentOS from other Linux
flavors: after all local user can yank power cord off the wall).
Sorry about my little rant above. Could someone point me into right
direction as to how do I disable the ability of (local, logged in through
X11) users to fiddle with network interfaces. Even worse, they can create
new profile and define for interfaces to behave differently... In the past
I could just add
USERCTL="no"
into interface ifcfg-... file inside /etc/sysconfig/network-scripts which
doesn't seen to have any effect on latest CentOS 7. What is my pilot error
here? (Ignorant in new shiny extremely MS Windows like for _ignorant_
person - me - system).
Thanks a lot for all your help!
Valeri
On the commute home so access to resources to test is limited.
This will no doubt be handled through polkit policy.
This should at least set you on the right path to discover and configure
the appropriate bits...
https://www.hogarthuk.com/?q=node/10
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
https://lists.centos.org/mailman/listinfo/centos
