deny su - root

[Daniel Carrillo]

2009/6/4 Matias Nicolas <matiasnicolas at live.co.uk>:
>
> hello everybody. I wannna know something... I want to deny the su - root to the users in the system. i don't know how to do that... does somebody know how to do that??
>
>
>
> Ex: I got 5 users (user1 user2 user3 user4 mine) I dont want them to do su - root. Let's let user2 do su - root And I (the administrator) want to login as root  when i get the "login as:" prompt. Is there any possibility to do that??

You can edit /etc/pam.d/su and follow the instructions from commented lines.

Basically, you can restrict use of su, to the users in group wheel.

BR.