how to add the group in su file

[rajesh73]

i want to give su permission for two groups. i was already try below points this is not working

1./etc/default/security -

# Users attempting to su to root must be a memeber
# of this group
 SU_ROOT_GROUP=admin

# Default umask value upon login. Note: This
# attribute controls umask(2) of all sessio

my try

# Users attempting to su to root must be a memeber
# of this group
 SU_ROOT_GROUP=admin,user

# Default umask value upon login. Note: This
# attribute controls umask(2) of all sessio

but this is not working,,,,please help me

[Patrick Wallek]

I don't think it is possible to have more than 1 group defined in the SU_ROOT_GROUP.  My understanding is that there can only be 1 group listed there.

To get around this why not create a 3rd group that you put ALL users that need to 'su ' to root into.  Then add that group to the SU_ROOT_GROUP line in /etc/default/security.

I will not go into the security implications of having LOTS of users with the ability to become root other than I think it is a bad idea.