From Bugzilla Helper: User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.5) Gecko/20041111 Firefox/1.0 Description of problem: enabling pam whell module in su #%PAM-1.0 .... #auth sufficient /lib/security/$ISA/pam_wheel.so trust use_uid # Uncomment the following line to require a user to be in the "wheel" group. auth required /lib/security/$ISA/pam_wheel.so use_uid .... nobody not in whell group can use su command do be everyone. Version-Release number of selected component (if applicable): 0.77-66.2 How reproducible: Always Steps to Reproduce: 1. michele in whell goup it's ok, su correctly work. 2. test not in whell group can't use su 3. tets$su michele Password: su: password sbagliata Expected Results: i expect whell moduele only deny to be root from not whell group user Additional info:
This is implemented in pam-0.78 (root_only option).