Hi chrism01,

Thank you for your reply.

In fact, it is my original question (sorry if I have not been very clear).

What I want to do is: stop an user from using su, however my system is based on Busybox and from this fact su is not a binary but su is a link to Busybox binary, which is why I am saying that it is a shame that I can't change permissions on links.

I am agree with about ACL but I don't think that this package is supported by Wind River Linux.

I just think about thing else, I could remove/rename the link and create a script instead to call the new su command and change the permission on the script. This should work.

Cheers,

Emmanuel

As I said above, being able to change permissions on symlinks wouldn't help you at all, because users could still create their own symlinks with whatever permissions they wish. Nothing stops you from building your own busybox, though. Busybox has a kernel-like menuconfig system which allows you to disable any applet, including su. I don't know what implications might that have on wind river linux though, but su is usually not something that your init system will use, so it should allow you to boot at the very least. Then you can install su as an external utility and restrict it so only root can use it. Does that sound ok?

It does not seem to be prohibited. Use chmod -h, maybe with sudo.