On 2012/12/09 05:51, Jiri B wrote: > On Sun, Dec 09, 2012 at 03:07:18PM +1030, David Walker wrote: > > Hey. > > > > I noticed adding a user to wheel doesn't provide su capability > > automatically. This is described in su(1). > > I though it might be useful to mention it in group(5) also. > > > > --- group.5 Sun Dec 9 14:14:58 2012 > > +++ group_change.5 Sun Dec 9 15:07:29 2012 > > @@ -81,7 +81,13 @@ > > .Xr passwd 5 > > entry and does not need to be added to that group in the > > .Nm > > -file. > > +file. Members of the > > +.Dq wheel > > +group, who wish to run commands as > > +.Dq root , > > +using > > +.Xr su 1 , > > +must be explicitly listed. > > .\" .Pp > > .\" When the system reads the file > > .\" .Pa /etc/group > > It would probably make more sense to change su(1) that 'wheel' > is secondary group in this context.
su(1) is crystal clear about this; "It is not sufficient to change a user's /etc/passwd entry to add them to the ``wheel'' group; they must explicitly be listed in /etc/group."