[TriLUG] Limiting su access to specific users

Jon Carnes trilug@trilug.org
Thu, 3 Jan 2002 00:18:32 -0500


Taken straight from the Mandrake forum...  Jon
===
   http://www.linux-tips.net/
 
Want to be able to control who uses su? It's quite easy.
Open up su...usually /etc/pam.d/su
Add or uncomment the line (as root)
auth required /lib/security/pam_wheel.so use_uid
(Mandrake 8.1 it is already there. All you have to do is uncomment it)
And thats it.
Make all users that you want to have su privledges, belong to the group 
wheel.

When a user who does not belong to the wheel group, tries to su, he will 
get a password incorrect message. Neat eh?