> adduser can't distinguish group root from user root, its a bug. Hmmm...
> i would recommend against using group root for this purpose, instead > add a new group `wheel' and use that. <snip good reasons> > for pam add this line to the top of your /etc/pam.d/su file: > > auth requisite pam_wheel.so group=wheel debug The example says required, but requisite is the far better choice - thanks! Another question: in /etc/pam.d/login there is a line that causes /etc/issue to be shown - it was commented out on my box, still an issue is displayed. I activated it and expected to see the issue line twice, which I didn't. What displays issue if the PAM option has no apparent effect? Thank you for your help! Christian