![]() |
|
|
|
|
|||||||
| Forums | Portal | Register | Forum Rules | FAQ | Contribute | Members List | Arcade | Search | Today's Posts | Mark Forums Read |
| UNIX for Dummies Questions & Answers If you're not sure where to post a UNIX or Linux question, post it here. All UNIX and Linux newbies welcome !! |
|
|
||||
| Thread | Thread Starter | Forum | Replies | Last Post |
| Disable GUI HP-UX | mdjuarsa | HP-UX | 1 | 10-06-2007 04:51 AM |
| disable rsh | sriram.s | AIX | 3 | 05-11-2007 09:18 AM |
| How to disable SU right | civic2005 | SUN Solaris | 3 | 03-09-2007 09:16 AM |
| Disable X window | XP_2600 | SUN Solaris | 4 | 09-24-2006 08:18 AM |
| Disable X | bbutler3295 | UNIX for Dummies Questions & Answers | 8 | 03-19-2002 03:19 PM |
|
|
Submit Tools | LinkBack | Thread Tools | Display Modes |
|
|||
|
disable su
i have this unix version "unix v/386" and i want to disable su
kindly help me |
| Forum Sponsor | ||
|
|
|
|||
|
You can simply removed the execute attribute from su preventing anyone from running it. However, may I suggest limiting it usage?
For example, on my Solaris 8 servers, all system administrators have a primary group of sysadmin (gid 14). The permissions of su have been changed such that only members of that group can execute su. Historically, the wheel account has been used to limit su(1M) access but the sysadmin group is not used by any other Solaris package. It also makes sense. Code:
# cd /usr/bin
# ls -la su
-r-sr-xr-x 1 root sys 21192 Jun 15 14:42 su
# /usr/bin/chgrp sysadmin su
# /usr/bin/chmod 04750 su
# ls -la su
-rwsr-x--- 1 root sysadmin 21192 Jun 15 14:42 su
# cd /sbin
# ls -la su.static
-r-xr-xr-x 1 root sys 524372 Jun 15 14:42 su.static
# /usr/bin/chgrp sysadmin su.static
# /usr/bin/chmod 04750 su.static
# ls -la su.static
-rwsr-x--- 1 root sysadmin 524372 Jun 15 14:42 su.static
|