Stormjumper wrote: >hi, > >i'm running mandrake 8.2. > >i would like to deny certain user groups >from running su. > >eg, if i create a group project, >and wanna deny all users of project >from being able to su. > >how do i do it? > >i've tried manually removing users from >the wheel group, in /etc/group, >but somehow the users can still su. >am i doing something wrong? > >thanks >-- > > > >------------------------------------------------------------------------ > >Want to buy your Pack or Services from MandrakeSoft? >Go to http://www.mandrakestore.com > Nope, you aren't
If you want to keep users from using su, then don't give them the root password. Instead, those who need to be su'ed for a while should be added to /etc/sudoers using visudo as the editor. and use their own password to be superuser equivalent for the commands you decide to permit. But nothing short of moving/removing su from the system will prohibit users from attempting to su. Naturally if they don't know the root password (or don't know that you moved su to /sbin) then they cannot become su. Civileme
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
