su 사용 계정 제한

1. /etc/pam.d/su 파일 수정(pam 모듈 미사용시 2번부터)

-아래와 같이 7번째 "#auth            required        pam_wheel.so use_uid"에서 #부분 삭제

[root@localhost ~]# cat /etc/pam.d/su
#%PAM-1.0
auth            sufficient      pam_rootok.so
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth           sufficient      pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
auth            required        pam_wheel.so use_uid
auth            substack        system-auth
auth            include         postlogin
account         sufficient      pam_succeed_if.so uid = 0 use_uid quiet
account         include         system-auth
password        include         system-auth
session         include         system-auth
session         include         postlogin
session         optional        pam_xauth.so

[root@localhost ~]# usermod -G wheel vlans

[root@localhost ~]# cat /etc/group |grep wheel
wheel:x:10:vlans

[root@localhost ~]# chgrp wheel /bin/su

 

5.su 파일 권한 변경 및 확인

[root@localhost ~]# chmod 4750 /bin/su
[root@localhost ~]# ls -al /bin/su
-rwsr-x---. 1 root wheel 32208 Oct 31  2018 /bin/su

끝.