By default all user's of Linux OS can do SU ( super user) and attempt to get root privileges ( if they are able to crack root password). We can avoid this by creating a group (i.e Admin) and assigning SU privilege to that group.
vi /etc/pam.d/su
### Uncomment the following line to require a user to be in the "wheel" group.
auth required /lib/security/$ISA/pam_wheel.so use_uid group=Admin
Note:group=Admin need to added after use_uid to group access to SU.
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment