|
http://www.hackerschool.org/HS_Boards/zboard.php?desc=desc&no=843 [복사]
리눅스에서 su 명령어 사용을 특정사용자에게만...
첫 번째, /etc/group 파일에서 wheel 그룹에 su 명령어를 사용할 사용자를 추가
예)
[root@kebia_1 ]# cat /etc/group
root:x:0:root
bin:x:1:root,bin,daemon
daemon:x:2:root,bin,daemon
sys:x:3:root,bin,adm
adm:x:4:root,adm,daemon
tty:x:5:
disk:x:6:root
lp:x:7:daemon,lp
mem:x:8:
kmem:x:9:
wheel:x:10:root,sspark
두 번째, /etc/pam.d/su 파일에 아래의 빨간색으로 표시된 두줄을 설정
[root@kebia_1 ]# cat /etc/pam.d/su
#%PAM-1.0
auth sufficient /lib/security/pam_rootok.so
auth required /lib/security/pam_wheel.so debug group=wheel
# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient /lib/security/pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth required /lib/security/pam_wheel.so use_uid
auth required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_xauth.so
|
Hit : 7845 Date : 2007/08/28 10:51
|
1586, 
75/80 
