Re: /sbin/reboot and secmodel

[Hubert Feyrer <hubert%feyrer.de@localhost>]

On Mon, 17 Mar 2008, Matthew Mondor wrote:
> There certainly are other such cases where setuid/setgid elimination
> will be problematic...  It would be nice to be able to come up with a
> general mechanism which could solve this situation in all similar
> cases that'll come up.

Have your random app call the reboot system call, have the kernel check if 
that's ok, and then have the kernel signal the userland facility to 
initiate the shutdown: init.

Internal communication can e.g. be done via a named pipe:
prw-------   1 root     root           0 Feb 14 16:51 /etc/initpipe

(Yeah, example taken from Solaris :)


 - Hubert