RE: disable 'su' for normal users

From: Dallas Engelken (dallase@nmgi.com)
Date: 11/10/01


From: "Dallas Engelken" <dallase@nmgi.com>
To: <focus-linux@securityfocus.com>
Subject: RE: disable 'su' for normal users
Date: Fri, 9 Nov 2001 17:11:48 -0600
Message-ID: <KGEOIIGPJBEOBCJBOCLFIEHACDAA.dallase@nmgi.com>


> I was wondering how one can disable the su-command for a normal user.
> Because certain programs need 'su' when linux boots, you cannot just alter
> the flags, ...
> Also it is a SETUID-prog.
>

As an addition to my last email, you might want to use "sudo" in your init
scripts because you can define the permissions much more clearly. Then lock
su down so only the root user and wheel group can access it.

Dallas Engelken
NMGI
http://www.nmgi.com