Mailinglist Archive: opensuse (3202 mails)

[Anders Johansson <ajh@xxxxxxxxxx>]

On Wednesday 14 November 2007 20:50:40 James D. Parra wrote:
> Hello,
>
> Is there a way to control which user accounts can use 'su' when using ssh?
> I want only a couple of users to be able to change to root when using ssh.

Unfortunately, Richard Stallman wants everyone who can log in to a machine to 
have root access (see the end comment in "info:su"), so there is no built-in 
way in su of doing this

What you can do is to change the ownership of /bin/su to the group "wheel", 
change the permissions on it to 4750, and add the users you want to have 
access to the wheel group

Or, alternatively, you can remove access to su completely, and use sudo 
instead, which does allow more fine grained control, through /etc/sudoers

Anders

-- 
Madness takes its toll
-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx