forcing "SU" to prompt for passwords...even as root.

[Joshua Leckner_1]

I am trying to figure out away to make the su command prompt for passwords for 11 and 11.11 even as root.


Trying to make SU even more secure since my envirnment is a software development lab and everyone has root.

[Helen French · Accepted solution]

Hi Joshua:

Set an alias for su or use su with -d option.

# man su for details

HTH,
Shiju

[Sridhar Bhaskarla]

Joshua,

The best solution is to have SUDO. You don't need to give them root access but they can work as root and you can have everything logged.

You can get sudo from HP's porting center.

http://hpux.cs.utah.edu/hppd/hpux/Sysadmin/sudo-1.6.2b1/

It can be very useful if the /etc/sudoers file is properly configured.

-Sri

[Deshpande Prashant]

Hi
I will also suggest using SUDO for root access.
Also define parameter "SU_ROOT_GROUP=" in /etc/default/security file to restrict su to root by administrators group.

Thanks.
Prashant Deshpande.