I have a fedora workstation pac connected to the living room tv, running some server duties in the house and playing games over streaming and on the tv it is connected to.

I want to forbid reboot/shutdown from the UI. I want only sudo in the terminal to be able to do that.

I’m no certain of the best way to do that. I cant go just hiding the options on a per UI basis as I’ll be playing whack-a-mole until I’m dead. Instead, Id like things like plasma and steam to understand they aren’t permitted to make that request, but if they try anyway, the OS just ignores them.

  • Ooops@feddit.org
    91·
    12 hours ago

    I don’t know if Fedora (or plasma) do things differently but the normal default is that you need sudo to reboot/shutdown/etc.

    Then on basically all distros using systemd this behavior is modified via logind session and polkit. So the first thing to look at would be if a shutdown rule exists in /etc/polkit-1/rules.d/ that allow users in a certain group to shutdown/reboot in the first place.

    Mine looks like this:

    /etc/polkit-1/rules.d/50-shutdown.rules
    polkit.addRule(function(action, subject) {
    if ((action.id == "shutdown" ||
    action.id == "reboot") &&
    subject.isInGroup("wheel"))
    {
    return polkit.Result.YES;
    }
    });

    So every user in the wheel group can do it without password prompt. Without this UI elements for shutdown/reboot will try assuming they have the right but simply fail.

    • eldavi@lemmy.mlEnglish
      4·
      12 hours ago

      @muusemuuse@sh.itjust.works this plus the display manager too if there is one since it runs as root. if you’re using gnome, there’s a gdm.conf somewhere in /etc where you can disable the power/reboot.