16.7.2. Application Access

The console user is also allowed access to certain programs with a file bearing the command name in the /etc/security/console.apps/ directory.
One notable group of applications the console user has access to are three programs which shut off or reboot the system. These are:
  • /sbin/halt
  • /sbin/reboot
  • /sbin/poweroff
Because these are PAM-aware applications, they call the pam_console.so module as a requirement for use.
For more information, refer to the Section 16.8.1, “Installed Documentation”.