topic Re: Command SU in Operating System - HP-UX

Command SU

Leonardo Preciado — Thu, 09 Aug 2007 12:24:23 GMT

Hi.

I need to block the "su" command in hpux, so nobody is able to execute it

Any idea.

Thks.

Re: Command SU

Pete Randall — Thu, 09 Aug 2007 12:28:09 GMT

You could "rm" it or, perhaps "mv" it to a different name, known only to you.

Pete

Re: Command SU

James R. Ferguson — Thu, 09 Aug 2007 12:31:44 GMT

Hi:

If restricting access to the root account is your goal, setup the 'SU_ROOT_GROUP' parameter in '/etc/default/security'. See the 'security(4)' manpages.

Regards!

...JRF...

Re: Command SU

Steven E. Protter — Thu, 09 Aug 2007 12:36:52 GMT

Shalom,

It is also possible to block su access without disabling the command, by modifying the default pam configuration.

Some links with peripheral

information:http://technet2.microsoft.com/windowsserver/en/library/5df736af-382f-4a6e-b2be-e83ff84557171033.mspx

http://barney.gonzaga.edu/~awithers/integration/

SEP

Re: Command SU

Juan M Leon — Thu, 09 Aug 2007 13:08:28 GMT

Leonardo,

I like more James suggestions to edit your security file and limit your users to specific group (admins)
SU_ROOT_GROUP=admins

good luck

Re: Command SU

Leonardo Preciado — Thu, 09 Aug 2007 14:07:47 GMT

Hi

my OS HP-UX 11.11 haven't archive /etc/default/security

Re: Command SU

Juan M Leon — Thu, 09 Aug 2007 14:21:08 GMT

you can create the file although it doesnot exist.