Re: [LI] su permission

[Ravindra Jaju <jaju@xxxxxxxxxxxxxxxx>]

> If you are worried about normal users using the su command, then a simple
> 
> chmod go-x `which su`
> 
> should do the trick.
> 

But how does the superuser himself do remote administration?

I suggest, create an admin group to which people who are supposed to get
control over the system should belong.

groupadd admin (or u can use the adm group which exists)
chown root.[adm|admin] `which su`
chmod 4510 `which su`

--jaju

--------------------------------------------------------------------
The Linux India Mailing List Archives are now available.  Please search
the archive at http://lists.linux-india.org/ before posting your question
to avoid repetition and save bandwidth.