Re: avoid su in ssh sessions

dpuryear_at_usa.net
Date: 05/28/04


Date: Thu, 27 May 2004 23:07:18 -0500

On 27 May 2004 13:47:05 -0700, pablo@crecat.com (pablo hernandez)
wrote:

>Can I avoid user to use "su" command if they log within an ssh session ?
>
>I did not see any any related thing in sshd_config.

Not really. Consider removing world permissions on su, setting group
ownership to a group such as wheel or su_users, and then putting only
allowed users in wheel or su_users. Alternatively, quit using su
entirely, start using sudo, and control user access using sudo rules.

---
Puryear Information Technology, LLC
Baton Rouge, LA
225-343-3056
http://www.puryear-it.com
Author of "Best Practices for Managing Linux and UNIX Servers"
Download your free copy:
http://www.puryear-it.com/bestpractices_ebook.htm