[gentoo-user] Re: How to set-up "shutdown-only" user?

[Remy Blank]

Jarry wrote:
> Or is there maybe some other way how to create very restricted
> account where user could not do anything else but call shutdown?

 - Create a local account for the user.
 - Disable local login (passwd -l).
 - Set up SSH public key authentication for the account.
 - In ~/.ssh/authorized_keys2 for the account, set the following
attributes for the public key:

     command="/usr/bin/sudo shutdown -h
now",no-pty,no-port-forwarding,no-X11-forwarding

 - Set up sudoers to allow the user to run "shutdown -h now".

This should allow the user to shut down the box by simply ssh'ing into it.

-- Remy