/sbin/reboot and secmodel

[Emmanuel Vadot <manu%bistoufly.org@localhost>]

Hello all,

After playing a little bit with secmodel, I've tried to authorized a 
user with a specific uid to reboot the system.
It didn't work as I expected and the secmodel callback isn't called at all.
After looking the code of reboot and talking about this with elad@, I 
see that two things just allow the root user to call /sbin/reboot :

  128          if (geteuid())
  129                  errx(1, "%s", strerror(EPERM));

and

  188          if (kill(1, SIGTSTP) == -1)
  189                  err(1, "SIGTSTP init");

I think that the check of the uid can be removed since we trust the 
secmodel.
But for the signal SIGTSTP send to the init, I don't know, and honestly 
I don't know what init does catching this signal :)

--
Manu