Hello, Is it possible to create a rule which is allow to run ALL unix commands but without to switch to any users ? I would prohibit the command /usr/bin/su and allow all other. Thanks for you help. -- Regards, Ahmed Karoumi