使用pam_wheel.so限制指定组wheel用户可以su到root用户的问题

shocker

找了很多方法，都不行。

first is:
vi /etc/pam.d/su   adding following line:
auth           required        pam_wheel.so  group=wheel
said only users in wheel group can su to root
or you can assign specific group like group=test meaning only users in test group can su to root.
But it doesn't work, any user can su to root whatever in wheel group or not.


second is:
uncomment the following line:
#auth           required        pam_wheel.so use_uid
It works that users in wheel group can su to root and users not in wheel group cannot su to root.
But normal users cannot su to another normal user also. why?

another is:
auth           required        pam_wheel.so
and adding "SU_WHEEL_ONLY yes" to /etc/login.defs
It doesn't work also.

freetstar

推荐lz看下我之前总结的一篇文章,我具体实践了下
http://www.freetstar.com/index.php/gnulinux-su

shocker

谢谢，我用的是rhel5.6，但是你说的方法不适合我的。