restrict su to non-root users

[Nazaf Khan]

We need to restrict "su" access such that it should not be possible to su to normal ( unprivileged ) user accounts.
For eg.. su to root should be possible but su to mickey should not be possible.

[Torsten.]

Once you become root you can do everything.

Consider to use sudo to perform commands as root instead of su.

[Nazaf Khan]

Hi Torsten,

Thanks for the reply, but my issue is that customer is insisting that, his normal user when used the su command to any other non-root user, it shoud give the error on that su command itself and it should not prompt for the login and the password.

But if that user does the su to root, then he should be able to get the login and password prompt.

[Torsten.]

Similar thread?

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1206541

[Nazaf Khan]

Thanks Torsten for the reply.

Yes, I do belive that the link can satisfy the customer query.


Thanks a lot.