disable su

sak900354 · #1 (**permalink**) 06-14-2006

i have this unix version "unix v/386" and i want to disable su
kindly help me

hegemaro · #2 (**permalink**) 06-14-2006

You can simply removed the execute attribute from su preventing anyone from running it. However, may I suggest limiting it usage?

For example, on my Solaris 8 servers, all system administrators have a primary group of sysadmin (gid 14). The permissions of su have been changed such that only members of that group can execute su. Historically, the wheel account has been used to limit su(1M) access but the sysadmin group is not used by any other Solaris package. It also makes sense.

Code:

    # cd /usr/bin
    # ls -la su
    -r-sr-xr-x   1 root     sys        21192 Jun 15 14:42 su
    # /usr/bin/chgrp sysadmin su
    # /usr/bin/chmod 04750 su
    # ls -la su
    -rwsr-x---   1 root     sysadmin   21192 Jun 15 14:42 su
    # cd /sbin
    # ls -la su.static
    -r-xr-xr-x   1 root     sys       524372 Jun 15 14:42 su.static
    # /usr/bin/chgrp sysadmin su.static
    # /usr/bin/chmod 04750 su.static
    # ls -la su.static
    -rwsr-x---   1 root     sysadmin  524372 Jun 15 14:42 su.static

With a few customizations, I'm sure it will work for your OS as well.

sak900354 · #3 (**permalink**) 06-15-2006

************************
Thank You
************************

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
How to disable SU right	civic2005	SUN Solaris	4	12-16-2008 11:19 AM
Disable GUI HP-UX	mdjuarsa	HP-UX	1	10-06-2007 07:51 AM
disable rsh	sriram.s	AIX	3	05-11-2007 12:18 PM
Disable X window	XP_2600	SUN Solaris	4	09-24-2006 11:18 AM
Disable X	bbutler3295	UNIX for Dummies Questions & Answers	8	03-19-2002 07:19 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by