Also you might want to "su -"
the "-" will allow the person to inherent root's environment this also goes
for any user you want to su to example "su - eric". Please also note you
have to be su'ed already.
i.e. "Note the names have been changed to protect the innocent."
login: eric
Password:***
Last login: Fri Jun 16 07:07:57 from somewere.on.the.net
[eric@test eric]$ su -
Password:***
[root@test /root]# su - user1
[user1@test user1]$
cheers,
--------------------------------------------
Eric Peters Mail:[EMAIL PROTECTED]
System Admin Network Operations
Inherent Technologies Inc.
office (503)224-6751 ext 224
--------------------------------------------
> -----Original Message-----
> From: Ernest N. Wilcox Jr. [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, June 15, 2000 10:04 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [expert] Mdk71 - su question !
>
>
> On Wed, 14 Jun 2000 - Andre Steden, you wrote:
> | Hello,
> |
> | if i login as root an console 1 and want to switch to
> another user with
> | su frank
> | i get :
> | bash: /dev/tty1: permission denied
> | (with Mandrake 7.1)
> |
> | i tried the same with Mdk7.0 - there is no such message.
> |
> | bye
> | --
> | Andre Steden <[EMAIL PROTECTED]>
>
> I just tried this with 7.0, and got the "permission denied"
> responce as well.
>
> Try becomming a superuser, then the other user and it will
> work - but you
> will still be logged onto your first user's home folder.
>
> So using user1 and user2 for the two user id's, when you log
> in as yourself,
>
> you will see [user1@localhost user1],
>
> then become the superuser, [root@localhost user1],
>
> and filally become the second user, [user2@localhost user1]
>
> If I understand correctly, the denial of permission to direct
> user id changes
> is a security feature which keeps regular users from
> switching their identity at
> will (even if you know the second user's passsword).
>
> If you know another user's id and password, this is not much
> of a hindrence,
> but it is still an inconvenience to have to log out and then
> back in as the
> other user. However it does prevent non authorized user id changes.
>
> HTH,
>
> --
> ___________________________
> Ernie ([EMAIL PROTECTED])
>
