deny su - root

[Daniel Carrillo]

2009/6/4 Matias Nicolas <matiasnicolas at live.co.uk>:
>
> Thanks for the answer, but... I found a bit difficult to understand the file... could u give me some hints on how to configure it??
>
>
>
> I leave the output:
>
>
>
> [root at vmrhel4 ~]# cat /etc/pam.d/su

> # Uncomment the following line to require a user to be in the "wheel" group.
> #auth       required     /lib/security/$ISA/pam_wheel.so use_uid

Simply, uncomment this line, and add trusted users to wheel group.