Mailinglist Archive: opensuse (3202 mails)

< Previous Next >
Re: [opensuse] limiting users who can use su
  • From: Aaron Kulkis <akulkis00@xxxxxxxxxx>
  • Date: Wed, 14 Nov 2007 16:17:38 -0500
  • Message-id: <473B65F2.7010500@xxxxxxxxxx>
James D. Parra wrote:
Hello,

Is there a way to control which user accounts can use 'su' when using ssh? I
want only a couple of users to be able to change to root when using ssh.


Don't use su...
use sudo.

that way, you can control EXACTLY which commands they can run
(for example, that way, a user can't go and delete some other
user's account, or make his own "extra" account, or any other
item from an unending list of mayhem).

There's a reason that YOU are the administrator and they aren't.
Therefore, they have no business being allowed to su to root
when sudo is available for ue.


--
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx

< Previous Next >
Follow Ups
References