How to disable SU right


 
Thread Tools Search this Thread
Operating Systems Solaris How to disable SU right
# 1  
Old 02-27-2007
How to disable SU right

Anyone know how to disable SU right for a particular user in Solaris 8
# 2  
Old 03-08-2007
try with an acl (Acces Control List) for the command su. Deny rwx for the user that you want
# 3  
Old 03-09-2007
One common approach is to create a group called "wheel". Then:
chgrp wheel /usr/bin/su
chmod 4550 /usr/bin/su
Now su can be run by root and by members of the group wheel. So you put some users in that group to allow them access to the su command.

It is traditional to call the group "wheel", but I don't know where that name came from. Possibly from "big wheel" which is slang for important person?
# 4  
Old 03-09-2007
Quote:
Originally Posted by civic2005
Anyone know how to disable SU right for a particular user in Solaris 8
You should not change the default file permissions and/or group of Solaris binaries, instead you should use RBAC and turn non-personal accounts into roles. Then you have to assign explicit permission to be able to assume the role (i.e. "su - role").

If you describe what problem you are trying to it is easier to suggest a good solution.
# 5  
Old 12-16-2008
Unless your root, you need to know the password for the account you're su'ing to. If I know the account's password, I don't need to su, I can simply login to the account as a normal user. Can you change passwords so that the user does not have access to any accounts that are not his/hers?

Simply denying access to su will only stop a user from switching user accounts. It will not stop the user performing an interactive login into the specified account, which has the same end result.
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Advanced & Expert Users

Disable rm -rf * or rm -rf / in Cent OS

Can some one suggest me the way to disable " rm -rf * " or " rm -rf / " command execution permanently from the server. Any suggestion will be very much helpful . (18 Replies)
Discussion started by: shiek.kaleem
18 Replies

2. Red Hat

SSL/TLS renegotiation DoS -how to disable? Is it advisable to disable?

Hi all Expertise, I have following issue to solve, SSL / TLS Renegotiation DoS (low) 222.225.12.13 Ease of Exploitation Moderate Port 443/tcp Family Miscellaneous Following is the problem description:------------------ Description The remote service encrypts traffic using TLS / SSL and... (2 Replies)
Discussion started by: manalisharmabe
2 Replies

3. UNIX for Dummies Questions & Answers

How to disable X windows?

I have modified /etc/inittab file for changing default runlevel from 5 to 3 . Now i can boot in terminal mode .However if i issue init 5 i get a X window. How would i disable loading X? do i need to disable some services? P.S. What is Xvfb? How would i disable it? My Distribution Details. #... (11 Replies)
Discussion started by: pinga123
11 Replies

4. HP-UX

Disable Setuid in HP-UX

Hi All, How to prevent root user from doing setuid(). In otherwords, if the root(any user) is trying to do setuid in a program it should fail. (5 Replies)
Discussion started by: guru13
5 Replies

5. Solaris

Printer always disable itself

Hi, I am using solaris 10, 1 of the printers encounter some issue and it is always disable itself and dont know why? any idea how to make it auto enable back to normal? is there any configuration or scripts?? kindly advise me. thanks. (2 Replies)
Discussion started by: freshmeat
2 Replies

6. Shell Programming and Scripting

How to disable Enable/Disable Tab Key

Hi All, I have bash script, so what is sintax script in bash for Enable and Disable Tab Key. Thanks for your help.:( Thanks, Rico (1 Reply)
Discussion started by: carnegiex
1 Replies

7. AIX

disable port

Is there a command to disable/enable a port? I want to disable a port from a script and don't want to edit the /etc/inetd /etc/services file. (2 Replies)
Discussion started by: daveisme
2 Replies

8. Solaris

Disable X window

I access my Sun box via ssh, and i dont need to x Window system at all, and everytime if i couldnt type user name and password fast enough its try to load the Java desktop, how can i disable X-Window login and make it stop at console login prompt ? thanks. (4 Replies)
Discussion started by: XP_2600
4 Replies

9. UNIX for Dummies Questions & Answers

disable su

i have this unix version "unix v/386" and i want to disable su kindly help me (2 Replies)
Discussion started by: sak900354
2 Replies

10. UNIX for Dummies Questions & Answers

Disable X

Im sure this is somthing easy to do but i just can not figure it out where and how would i take X out of the boot for hp ux 11 i looked in the man's and nothing so maybe sombody could throw me a bone... thanks BB (8 Replies)
Discussion started by: bbutler3295
8 Replies
Login or Register to Ask a Question