Any user can halt/reboot system and obtain root shell from console.
vulners.com/securityvulns/securityvulns:doc:4196
vulners.com/securityvulns/securityvulns:doc:455