Command SU

[Leonardo Preciado]

Hi.

I need to block the "su" command in hpux, so nobody is able to execute it

Any idea.

Thks.

[Pete Randall]

You could "rm" it or, perhaps "mv" it to a different name, known only to you.


Pete

[James R. Ferguson]

Hi:

If restricting access to the root account is your goal, setup the 'SU_ROOT_GROUP' parameter in '/etc/default/security'. See the 'security(4)' manpages.

Regards!

...JRF...

[Steven E. Protter]

Shalom,

It is also possible to block su access without disabling the command, by modifying the default pam configuration.

Some links with peripheral

information:http://technet2.microsoft.com/windowsserver/en/library/5df736af-382f-4a6e-b2be-e83ff84557171033.mspx


http://barney.gonzaga.edu/~awithers/integration/


SEP

[Juan M Leon]

Leonardo,

I like more James suggestions to edit your security file and limit your users to specific group (admins)
SU_ROOT_GROUP=admins

good luck

[Leonardo Preciado]

Hi

my OS HP-UX 11.11 haven't archive /etc/default/security

[Juan M Leon]

you can create the file although it doesnot exist.