Restricting access to su command

As I can liberate the access to the command su only for some users? Blocking excessively.Thanks

[116 byte] By [DanielNeckel] at [2007-11-25 22:59:36]

«« Does Sunscreen 3.2 supports PAT?
»» log parameters in acct

# 1

If I understand the question correctly, you want to remove access to su for most users and keep for some? I think both RBAC and sudo can make that happen...

pt_actor at 2007-7-5 17:14:54 >

top of Java-index,General,Sun Alert and Security Discussion...

# 2

I go to try this.Thanks

DanielNeckel at 2007-7-5 17:14:54 >

# 3

I took a BSD approach to the su command. You can look into using RBAC and SUDO, but if you just want to restrict who can run the SU command it is pretty easy. I created another group called "wheel" and removed the executable bit from su. Add people to the wheel group and bingo people i want can run it others cannot.

echo "wheel:x:15:user,user,user,user" >> /etc/group

chgrp wheel /usr/bin/su

chmod o-rx /usr/bin/su

SteveC at 2007-7-5 17:14:54 >

Java programming resources: FAQs, tutorials, compiler and browser download sites, documentation, books lists, IDEs, etc.

Restricting access to su command

General New Topic

General Hot Topic

General

All Classified