Preventing "su" to root

Preventing "su" to root

Post by JABH » Wed, 16 Oct 1996 04:00:00



Is therea a setting in Solaris2.x to prevent su access to root.
I know these settings in AIX . But have not come across any in Solaris.
If anyone knows how to set this please let me know.
DIlesh J.

 
 
 

Preventing "su" to root

Post by R!ch » Wed, 16 Oct 1996 04:00:00



Quote:> Is therea a setting in Solaris2.x to prevent su access to root.
> I know these settings in AIX . But have not come across any in Solaris.
> If anyone knows how to set this please let me know.

I guess the answer is to make sure your root password is secure.  If it
isn't known, then users can't su root anyway.

---
R!ch

If it ain't analogue, it ain't music.
#include <disclaimer.h>                          \\|// - ?
                                                 (o o)
          /==================================oOOo=(_)=oOOo========\

          |  Sun Service Contractor                               |
          |                            Voice: +44 (0)1276 691974  |
          |                                 .oooO                 |
          |                                  (  )  Oooo.          |
          \===================================\ (==(   )==========/
                                               \_)  ) /
                                                   (_/

 
 
 

Preventing "su" to root

Post by Matus Uhl » Sun, 20 Oct 1996 04:00:00




-> > Is therea a setting in Solaris2.x to prevent su access to root.
-> > I know these settings in AIX . But have not come across any in Solaris.
-> > If anyone knows how to set this please let me know.

-> I guess the answer is to make sure your root password is secure.  If it
-> isn't known, then users can't su root anyway.

No, that's not enough.
in ftp.fwi.uva.nl in /pub/unix/solaris there's shared library
unix_scheme.so.1 which allows that. Maybe you can get s/key su
it allows only su to root for people in group 0
--


 ...and if you think I'm talking for my employer, you're wrong...

 
 
 

Preventing "su" to root

Post by Peter M. O'Donne » Sun, 20 Oct 1996 04:00:00


: Is therea a setting in Solaris2.x to prevent su access to root.
: I know these settings in AIX . But have not come across any in Solaris.
: If anyone knows how to set this please let me know.

        well, since normal users rarely su to others, try chmoding su to
750, and set the group to the secure group. that should work.

peter

 
 
 

Preventing "su" to root

Post by johnny_ » Mon, 21 Oct 1996 04:00:00




> : Is therea a setting in Solaris2.x to prevent su access to root.
> : I know these settings in AIX . But have not come across any in Solaris.
> : If anyone knows how to set this please let me know.

>         well, since normal users rarely su to others, try chmoding su to
> 750, and set the group to the secure group. that should work.

> peter

And don't forget to pray that the console never locks up if
/etc/default/login prevents root from a direct login anyplace
but the console.

Unless of course he allows rsh from another machine as root....
but thats another story ... and a quite scary one at that.
--
+---------------------------------------+
| Mr. Who is:                           |


|                                       |
| So sayeth Dilbert:                    |
|    Technology is no place for wimps!  |
+---------------------------------------+