Limiting root su on Solaris?

[Suzanne Levy]

Add these lines to your /etc/sudoers

#users in SUPPORT group
User_Alias  SUPPORT=user1,user2,user3

#the command alias to allow su, except to root
Cmnd_Alias  SWITCH=/usr/bin/su - [A-z]*, !/usr/bin/su - root

#the commands that SUPPORT can use
SUPPORT  ALL=SWITCH

##################################################
I always use sudo su - username rather than sudo su username and I think if
you want to allow both commands that you will need to specify them
separately.

Hope this helps,

Suzanne Levy
Open Systems Analyst
Interconnect Services
Datamail Limited
DDI   04 576 4070
Mobile 021 530 900
Email  suzanne.levy at datamail.co.nz
www.datamail.co.nz


-----Original Message-----
From: Mark Horning [mailto:rip6 at rip6.net]
Sent: Sunday, 25 March 2001 4:27 p.m.
To: sudo-users at courtesan.com
Subject: Limiting root su on Solaris?


Hi All!,
  I'm trying to restrict root su on a Solaris
box while allowing su to other users. Has
anyone had any success at this? I've tried
the man page examples and a few other things
but still can't seem to restrict that access.

Thanks lots,
Mark

-- 

Mark Horning
rip6 at rip6.net
____________________________________________________________ 
sudo-users mailing list <sudo-users at courtesan.com>
For list information, options, or to unsubscribe, visit:
http://www.courtesan.com/mailman/listinfo/sudo-users