令人困惑的su -user问题

oliseh

在Smitty Chuser中有一项：

Another user can SU TO USER?                        true  or  false

这一项好像没什么用，因为当我把它设成True的时候，执行su - username并且键入该用户的密码后，就能以该用户的名义登陆。
而当我把它设成False的时候，执行su - username并且键入该用户的密码后，仍然能以该用户的名义登陆。
True和False难道真的没有区别吗？

johnsons

好像还有一项Another group can su to user?你也把这个改成false试试看，

feeling

su Indicates whether another user can switch to the specified user account with the su command. Possible values are:
  true
    Another user can switch to the specified account. This is the default.
  false
    Another user cannot switch to the specified account.

sugroups Lists the groups that can use the su command to switch to the specified user account. The Value parameter is a comma-separated list of group names, or a value of ALL to indicate all groups. An ! (exclamation point) in front of a group name excludes that group. If this attribute is not specified, all groups can switch to this user account with the su command.