Re: disable 'su' for normal users

From: Jeffrey Denton (dentonj@c2i2.com)
Date: 11/10/01 

Date: Fri, 9 Nov 2001 16:11:32 -0700 (MST)
From: Jeffrey Denton <dentonj@c2i2.com>
To: bugtraq <bug@walhalla.sin.khk.be>
Subject: Re: disable 'su' for normal users
Message-ID: <0111091605150.538-100000@localhost>

On Thu, 8 Nov 2001, bugtraq wrote:

> I was wondering how one can disable the su-command for a normal user.

'man suauth'
In /etc/suauth:

root:ALL:DENY
or
ALL:ALL:DENY

PAM should be able to do the same thing for those distributions that use PAM.

dentonj