[Bug 1025175] Normal user can power off a Opensuse machine without elevated privlages using systemCTL

http://bugzilla.opensuse.org/show_bug.cgi?id=1025175 http://bugzilla.opensuse.org/show_bug.cgi?id=1025175#c1 --- Comment #1 from Patrick Finie --- (In reply to Patrick Finie from comment #0)

Since the implementation of SystemD i have found that it is possible for a normal user to be able to power down a machine without elevated privileges or logging in as root.

Versions of OpenSUSE effected: 13.1, 13.2, 42.1, 42.2, Tumbleweed, Arm + x86 + X86_64

Command:

$ systemctl poweroff

Expected result is that the poweroff command fails asking for root privlages.

Actual result, machine powers off killing off any other users and services that are running.

Other tested commands:

$ systemctl reboot

Expected results based on Debian. $ systemctl poweroff ==== AUTHENTICATING FOR org.freedesktop.login1.power-off === Authentication is required for powering off the system. Authenticating as: ,,, (MirChip9dollacomputer) Password: Failed to execute operation: Connection timed out Failed to start poweroff.target: Access denied -- You are receiving this mail because: You are on the CC list for the bug.