Restricting su to root

[Greg Dick_1]

Does anyone know of an easy way to restict which system users have the ability to su to root. I don't wish to restict the ability for users to su between themselves, but would like to only allow a few users to be able to su to root. Any ideas ??

[Mark Vollmers]

I think that the general opinion in the forums for restricting who can su to root is to install sudo. There are a bunch of threads about how to config this (search for sudo) to give certain users superuser abilities or to lock out people from using su.

Mark

[Mark Vollmers]

In addition to sudo, here are some ideas for modifications that will check for root id, etc.

http://forums.itrc.hp.com/cm/QuestionAnswer/1,1150,0xaf7e37f45ef7d4118fef0090279cd0f9,00.html

Mark

[Michael Tully]

Hi Greg,

Below is the link to the sudo site:

http://www.courtesan.com/sudo/

One thing that wasn't mentioned is who
has access to the root account? Does your
organisation allow more than system
administrator to access it, i.e security??

They only people who have the root password
in our organisation is us system administrators,
our manager and a copy of these passwords which
are in a safe, where only two people have access.
Works for us.....

Good luck
Michael

[Vincenzo Restuccia]

Compile a C program with permission 4501.

[Paula J Frazer-Campbell]

Hi


Easy fix -Do not tell them the root password!!!


Paula