Keep all but the root user from running su

bcwagne · 06-17-2008, 08:27 PM

I don't want users to be able to run the 'su' command, but am not sure the best way to do this. I thought I might remove su from /bin to /sbin, but I don't know if that is a good thing to do or not.

I also thought I might set the permissions differently. I only want root to be able to run it.

Any suggestions?

Thanks.

bcwagne · 06-17-2008, 08:45 PM

Nevermind, I figured out the correct file permissions. That is better than moving to /sbin.

GrapefruiTgirl · 06-17-2008, 08:46 PM

For one thing, root would never need to run su (unless you really wanted root to act as another user) but yes, chmodding su to stricter permissions should do what you want. Change it to "RWX --- ---"

SVA

EDIT - I see you figured it out

billymayday · 06-17-2008, 08:50 PM

su'ing to a user is quite handy. If I su to root, I need to give a password. Rather than dropping back to myself to perform a user function, I'll su to myself (no password required) then exit back. Makes life simpler.

GrapefruiTgirl · 06-17-2008, 10:20 PM

Quote:

Originally Posted by billymayday

su'ing to a user is quite handy. If I su to root, I need to give a password. Rather than dropping back to myself to perform a user function, I'll su to myself (no password required) then exit back. Makes life simpler.

That is a really interesting concept

that I hadn't thought of. Thanks! It may come in handy to keep in mind.

SVA