The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > OS Specific Forums > SUN Solaris
Google UNIX.COM


SUN Solaris The Solaris Operating System, usually known simply as Solaris, is a free Unix-based operating system introduced by Sun Microsystems .

More UNIX and Linux Forum Topics You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Disable GUI HP-UX mdjuarsa HP-UX 1 10-06-2007 04:51 AM
disable rsh sriram.s AIX 3 05-11-2007 09:18 AM
Disable X window XP_2600 SUN Solaris 4 09-24-2006 08:18 AM
disable su sak900354 UNIX for Dummies Questions & Answers 2 06-15-2006 12:56 AM
Disable X bbutler3295 UNIX for Dummies Questions & Answers 8 03-19-2002 03:19 PM

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 02-27-2007
Registered User
 

Join Date: May 2005
Posts: 17
How to disable SU right

Anyone know how to disable SU right for a particular user in Solaris 8
Reply With Quote
Forum Sponsor
  #2 (permalink)  
Old 03-08-2007
Registered User
 

Join Date: Mar 2007
Posts: 3
try with an acl (Acces Control List) for the command su. Deny rwx for the user that you want
Reply With Quote
  #3 (permalink)  
Old 03-08-2007
Perderabo's Avatar
Unix Daemon
 

Join Date: Aug 2001
Location: Washington DC Area
Posts: 8,355
One common approach is to create a group called "wheel". Then:
chgrp wheel /usr/bin/su
chmod 4550 /usr/bin/su
Now su can be run by root and by members of the group wheel. So you put some users in that group to allow them access to the su command.

It is traditional to call the group "wheel", but I don't know where that name came from. Possibly from "big wheel" which is slang for important person?
Reply With Quote
  #4 (permalink)  
Old 03-09-2007
Registered User
 

Join Date: Feb 2007
Posts: 22
Quote:
Originally Posted by civic2005
Anyone know how to disable SU right for a particular user in Solaris 8
You should not change the default file permissions and/or group of Solaris binaries, instead you should use RBAC and turn non-personal accounts into roles. Then you have to assign explicit permission to be able to assume the role (i.e. "su - role").

If you describe what problem you are trying to it is easier to suggest a good solution.
Reply With Quote
Google UNIX.COM
Reply

Thread Tools
Display Modes




All times are GMT -7. The time now is 11:03 AM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008 The CEP Blog All Rights Reserved -Ad Management by RedTyger Visit The Global Fact Book

Content Relevant URLs by vBSEO 3.2.0