Determingin who can su and to where


 
Thread Tools Search this Thread
Top Forums Shell Programming and Scripting Determingin who can su and to where
# 1  
Old 05-21-2009
Determingin who can su and to where

In unix how to get a list of user id's that can su and to what ids they can su too?
# 2  
Old 05-25-2009
Anyone can su to another user, unless that user is root. (su with no args or just -). They just need to know the target user's password. Root can always su as any user without the password.

It depends on the system, but historically, anyone in the "wheel" group can run su as root, assuming they know the root password. You can check this in /etc/group and grep for the "wheel" entry. On Linux systems, especially modern ones, you cannot count on this. First, /etc/security/access is consulted, /etc/pam.d/ is consulted, and depending on this, wheel might or might not be used to allow users. If it's not, chances are anyone can su.

As for the second part, anyone who can successfully su to root can do anything they like.
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question