[sudo-users] Granting users the ability to su to another user via sudo

[Galen Johnson]

Why use su at all?  You can do this with sudo...sudo -s.

=G=

-----Original Message-----
From: sudo-users-bounces at courtesan.com [mailto:sudo-users-bounces at courtesan.com] On Behalf Of John Adams
Sent: Wednesday, September 22, 2010 11:39 AM
To: sudo-users at sudo.ws
Subject: [sudo-users] Granting users the ability to su to another user via sudo

Hi, folks,

	I've been asked to allow su'ing to another user without the original user having the password of the account to which they're su'ing. The obvious way to do this is by using sudo and putting an entry like this into the sudoers file:

%group ALL=(root) su - user

	It seems so simple and obvious that is raises this question: How bad an idea is this?

Thanks,

	John A
____________________________________________________________
sudo-users mailing list <sudo-users at sudo.ws>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-users