This bug has been reported on Ubuntu Launchpad as: https://bugs.launchpad.net/bugs/65010 User *without any rights* easily shuts down server with a lot of other users connected... Xfce 4 Desktop Environment version 4.6.1 (Xfce 4.6) xfce4-panel 4.6.1 (Xfce 4.6.1) 1) I use Ubuntu 9.10 (server) 2) I prepare my LTSP setup in following steps: Install ubuntu-server-i386 on clean partition of 'server' PC install & configure LTSP package run 'sudo apt-get install xubuntu-desktop' run Xfce under root user, get updates run 'adduser' to create 'user's without any rights boot 'thin client's from 'server' and login on clients via Xfce under 'user's 3) Play with this setup, and see all is fine except one thing: When i select 'Quit -> Shutdown' on client panel, i immediately get a lot of 'SQUASHFS errors' on client and power off of server. I think it's a critical bug,.. but i currently not sure it's Xfce bug or not. Then I try workaround as in Comment #12, it's work - i no more able to ruin 'server', but now no simple (and cute) way to poweroff client PC... only way is logout first, then shut down client via login window menu. Thank you! Workaround from comment #12 in Ubuntu Launchpad: A workaround that does work: in /etc/dbus-1/system.d/hal.conf convert some lines with: allow send_interface="org.freedesktop.Hal.Device.SystemPowerManagement" into html-style comments. (not all are neccessary I guess): policy at_console="true", policy group="powerdev", policy context="default"
How is this a panel issue? It only triggers the session manager to shutdown the system.
Where should it be, then? The quit button in the panel is what is being reported to cause the issue. I would be happy to move it to the right place, if I knew where that is.
Reassign to xfce-bugs@xfce.org.
Xfce4 Session 4.8 already checks for all the hal/policykit/consolekit/foo stuff so you should configure that if you don't want your users to be able to shutdown from Xfce. Closing this, feel free to reopen if I did not understand correctly.