On 2016-11-16 16:08, Wolfgang Bauer wrote:
Am Mittwoch, 16. November 2016, 13:44:55 schrieb Thomas Wagner:
Yes I was using kdm when testing DISPLAYMANAGER_SHUTDOWN
Ah yes, I forgot. DISPLAYMANAGER_SHUTDOWN is not used/respected at all any more since years, because it confused users that KDE's settings had no effect and kdm was the only one to still support this anyway. So, maybe it should be deleted from the config files then, since now it confuses people (at least me) by being there and doing nothing.
You need to set it in kdm's config then, /usr/share/kde4/config/kdm/kdmrc (AllowShutdown=None, in the [X-:*-Core] section for local users and in the [X- *-Core] section for remote users IIANM). You can use KDE4's systemsettings for this (in the package kdebase4-workspace- addons), "kcmshell4 kdm" (in kdebase4-runtime which should be installed by default), Would this work if no kde4 is used?
YaST->Security and Users->Security Center and System Hardening should offer this setting as well and configure it correctly (until that has changed recently). I remember this feature from an old openSUSE versions (IMHO 13.1), but I always though this just sets the unused DISPLAYMANGER_SHUTDOWN variable.
Added the polkit rules, but it doesn't change anything. The users can still power-off/reboot from either the greeter (sddm, kdm, or lightdm) and via systemctl.
Hm, I really though that should work (and googling seems to suggest that too), but I can confirm that it doesn't.
Unfortunately, my knowledge about polkit is very limited, thus I'm unable to debug this in reasonable time.
For sddm, you could try to change the HaltCommand and RebootCmd options then (to /bin/false e.g.), but I'm not sure they are respected on a systemd system at all.
Found these options and they use /usr/bin/systemctl as default, which leads to the (not working) polkit approach. Best regards Thomas -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org