Bug#261980: gnome-session: Shutdown/reboot option does not ask for password

[Jaume]

Package: gnome-session
Version: 2.6.2-4
Severity: important

Dear Debian Developers,

The new feature to shutdown/reboot the machine on the logout does not ask
for the root password.

.- Behaviour: 
   1.- I logout from my gnome session (or run gnome-session-save --kill), 
   2.- A menu is shown asking whether logout/shutdown/reboot
   3.- I choose reboot
   4.- The machine reboots without asking for a password 

.- Expected behaviour:
   .- After point 3 above, I should be asked for the root password, in order
      to proceed with the reboot (and the machine should not reboot if the
      password is wrong).

This could cause data loss, if some other user is logged in remotelly (via ssh) 
or in a text console. Only users authorised by root should be able to reboot
the machine. (NOTE: gdm allows me to reboot the machine, but it asks for the
root password before proceeding)

Best regards, and thank you for your work,

Jaume

-- System Information:
Debian Release: 3.1
  APT prefers testing
  APT policy: (500, 'testing'), (105, 'unstable')
Architecture: i386 (i686)
Kernel: Linux 2.6.7alcatel
Locale: LANG=C, LC_CTYPE=C

Versions of packages gnome-session depends on:
ii  desktop-base              0.3.14         common files for the Debian Deskto
ii  libart-2.0-2              2.3.16-6       Library of functions for 2D graphi
ii  libatk1.0-0               1.6.1-2        The ATK accessibility toolkit
ii  libaudiofile0             0.2.6-4        Open-source version of SGI's audio
ii  libbonobo2-0              2.6.2-5        Bonobo CORBA interfaces library
ii  libbonoboui2-0            2.6.1-1        The Bonobo UI library
ii  libc6                     2.3.2.ds1-13   GNU C Library: Shared libraries an
ii  libesd0                   0.2.29-1       Enlightened Sound Daemon - Shared 
ii  libgconf2-4               2.6.2-1        GNOME configuration database syste
ii  libglib2.0-0              2.4.4-1        The GLib library of C routines
ii  libgnome2-0               2.6.1-8        The GNOME 2 library - runtime file
ii  libgnomecanvas2-0         2.6.1.1-2      A powerful object-oriented display
ii  libgnomeui-0              2.6.1.1-3      The GNOME 2 libraries (User Interf
ii  libgnomevfs2-0            2.6.1.1-5      The GNOME virtual file-system libr
ii  libgtk2.0-0               2.4.4-1        The GTK+ graphical user interface 
ii  libice6                   4.3.0.dfsg.1-6 Inter-Client Exchange library
ii  liborbit2                 1:2.10.2-1.1   libraries for ORBit2 - a CORBA ORB
ii  libpango1.0-0             1.4.0-4        Layout and rendering of internatio
ii  libpopt0                  1.7-4          lib for parsing cmdline parameters
ii  libsm6                    4.3.0.dfsg.1-6 X Window System Session Management
ii  libwrap0                  7.6.dbs-4      Wietse Venema's TCP wrappers libra
ii  libx11-6                  4.3.0.dfsg.1-6 X Window System protocol client li
ii  libxml2                   2.6.11-2       GNOME XML library
ii  libxmu6                   4.3.0.dfsg.1-6 X Window System miscellaneous util
ii  libxrandr2                4.3.0.dfsg.1-6 X Window System Resize, Rotate and
ii  libxrender1               0.8.3-7        X Rendering Extension client libra
ii  libxt6                    4.3.0.dfsg.1-6 X Toolkit Intrinsics
ii  xlibs                     4.3.0.dfsg.1-6 X Window System client libraries m
ii  zlib1g                    1:1.2.1.1-5    compression library - runtime

-- no debconf information