From 456065f3f8d9ba785b0d2d9dc247fc9fb4fe9ba0 Mon Sep 17 00:00:00 2001
From: William Jon McCann <jmccann@redhat.com>
Date: Wed, 30 Jul 2008 18:06:31 -0400
Subject: don't allow reboot if PolicyKit and RBAC are disabled

---
 configure.ac | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

(limited to 'configure.ac')

diff --git a/configure.ac b/configure.ac
index e0b7e98..b540f24 100644
--- a/configure.ac
+++ b/configure.ac
@@ -431,5 +431,14 @@ echo "
         PAM module dir:           ${PAM_MODULE_DIR}
         Build PAM module:         ${msg_pam_module}
         Build docs:               ${enable_docbook_docs}
-        Build with RBAC:          ${msg_rbac_shutdown}
+
+        PolicyKit support         ${have_polkit}
+        RBAC (Solaris) support:   ${msg_rbac_shutdown}
 "
+if test x${have_polkit} = xno -a x${msg_rbac_shutdown} = xno; then
+   echo "WARNING: PolicyKit and RBAC are disabled. You need to manually edit the ConsoleKit.conf"
+   echo "         file to lock down the service. Failure to do so may be"
+   echo "         a huge SECURITY HOLE. I repeat: YOU NEED TO EDIT THE FILE"
+   echo "         ConsoleKit.conf to match your distro/site to avoid NASTY SECURITY HOLES."
+   echo ""
+fi
\ No newline at end of file
-- 
cgit