> -----Original Message----- > From: Linux on 390 Port [mailto:[email protected]] On > Behalf Of Smith, Ann (ISD, IT) > Sent: Tuesday, October 20, 2009 10:23 AM > To: [email protected] > Subject: SLES10 su only id > > To provide an audit trail of who did what, I'd like to make > a shared id > 'su only'. > I wondered what methods other folks use to prevent direct > login to an id > on a SLES10 server and allow login only via su. > > Ann Smith
Don't have a password for the otheruser at all. And then have the authorized users (authorized via visudo) do the command: sudo -u otheruser sh -l I think this will get you want you want. If not, I will be (gently?) corrected. -- John McKown Systems Engineer IV IT Administrative Services Group HealthMarkets(r) 9151 Boulevard 26 * N. Richland Hills * TX 76010 (817) 255-3225 phone * (817)-961-6183 cell [email protected] * www.HealthMarkets.com Confidentiality Notice: This e-mail message may contain confidential or proprietary information. If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message. HealthMarkets(r) is the brand name for products underwritten and issued by the insurance subsidiaries of HealthMarkets, Inc. -The Chesapeake Life Insurance Company(r), Mid-West National Life Insurance Company of TennesseeSM and The MEGA Life and Health Insurance Company.SM ---------------------------------------------------------------------- For LINUX-390 subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO LINUX-390 or visit http://www.marist.edu/htbin/wlvindex?LINUX-390
