Bug#361530: gdm: SecureSystemMenu does not work

[Tanguy Ortolo]

Package: gdm
Version: 2.13.0.10-2
Severity: normal

I have SecureSystemMenu=true in /etc/gdm/gdm.conf,, but anybody can halt or reboot without typing root password.

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.16
Locale: LANG=fr_FR at euro, LC_CTYPE=fr_FR at euro (charmap=ISO-8859-15)

Versions of packages gdm depends on:
ii  adduser                  3.85            Add and remove users and groups
ii  debconf [debconf-2.0]    1.4.72          Debian configuration management sy
ii  gksu                     1.3.7-1         graphical frontend to su
ii  gnome-session            2.14.0-1        The GNOME 2 Session Manager
ii  konsole [x-terminal-emul 4:3.5.2-1       X terminal emulator for KDE
ii  libart-2.0-2             2.3.17-1        Library of functions for 2D graphi
ii  libatk1.0-0              1.11.4-1        The ATK accessibility toolkit
ii  libattr1                 2.4.32-1        Extended attribute shared library
ii  libc6                    2.3.6-5         GNU C Library: Shared libraries an
ii  libcairo2                1.0.4-1         The Cairo 2D vector graphics libra
ii  libdmx1                  6.9.0.dfsg.1-6  Distributed Multihead X client lib
ii  libfontconfig1           2.3.2-5.1       generic font configuration library
ii  libglade2-0              1:2.5.1-2       library to load .glade files at ru
ii  libglib2.0-0             2.10.1-2        The GLib library of C routines
ii  libgnomecanvas2-0        2.14.0-1        A powerful object-oriented display
ii  libgtk2.0-0              2.8.16-1        The GTK+ graphical user interface 
ii  libpam-modules           0.79-3.1        Pluggable Authentication Modules f
ii  libpam-runtime           0.79-3.1        Runtime support for the PAM librar
ii  libpam0g                 0.79-3.1        Pluggable Authentication Modules l
ii  libpango1.0-0            1.12.0-2        Layout and rendering of internatio
ii  libpopt0                 1.7-5           lib for parsing cmdline parameters
ii  librsvg2-2               2.14.2-1        SAX-based renderer library for SVG
ii  librsvg2-common          2.14.2-1        SAX-based renderer library for SVG
ii  libselinux1              1.30-1          SELinux shared libraries
ii  libwrap0                 7.6.dbs-9       Wietse Venema's TCP wrappers libra
ii  libx11-6                 6.9.0.dfsg.1-6  X Window System protocol client li
ii  libxau6                  6.9.0.dfsg.1-6  X Authentication library
ii  libxcursor1              1.1.3-1         X cursor management library
ii  libxdmcp6                6.9.0.dfsg.1-6  X Display Manager Control Protocol
ii  libxext6                 6.9.0.dfsg.1-6  X Window System miscellaneous exte
ii  libxi6                   6.9.0.dfsg.1-6  X Window System Input extension li
ii  libxinerama1             6.9.0.dfsg.1-6  X Window System multi-head display
ii  libxml2                  2.6.23.dfsg.2-3 GNOME XML library
ii  libxrandr2               6.9.0.dfsg.1-6  X Window System Resize, Rotate and
ii  libxrender1              1:0.9.0.2-1     X Rendering Extension client libra
ii  lsb-base                 3.0-16          Linux Standard Base 3.0 init scrip
ii  metacity [x-window-manag 1:2.14.1-1      A lightweight GTK2 based Window Ma
ii  xbase-clients            6.9.0.dfsg.1-6  miscellaneous X clients
ii  xterm [x-terminal-emulat 210-2           X terminal emulator
ii  zlib1g                   1:1.2.3-11      compression library - runtime

Versions of packages gdm recommends:
ii  dialog                    1.0-20060221-1 Displays user-friendly dialog boxe
ii  gdm-themes                0.5            Themes for the GNOME Display Manag
ii  whiptail                  0.52.2-3       Displays user-friendly dialog boxe
pn  zenity                    <none>         (no description available)

-- debconf information:
  gdm/daemon_name: /usr/bin/gdm
* shared/default-x-display-manager: gdm