On Wed, 10 Aug 2011 14:39:27 -0400
Robert Isaac <[email protected]> wrote:


> I understand that, however _all_ users can gain root with gnu su,
> effectively defeating the purpose of groups if you don't configure
> pam_wheel beyond its default.

no, root password must be held by administrator only, not _all_ users
of a system, if a app need more privileges a admin should enable the
specified yuser with the special requirement on sudoears list, but NOT
all user can use "su" and use root password to gain uid0 level


-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive: 
http://lists.debian.org/[email protected]

Reply via email to