su to root with no password

From: chris los <clos_at_trentu.ca>
Date: Thu, 05 Sep 2002 16:10:56 -0400

How is it possible for a non-root account to "su -" and not have to
enter a password to obtain the root identity??

The only thing special about the non-root account i'm using is that it
is a member of group "0:system". This is a new behaviour we're seeing
and am wondering if it is this group membership alone that is
permitting the root identity without the password.

 Is it possible to disable this behaviour without removing the account
from system group? (ie force user to enter the password before obtaining
root)
 
TIA
Received on Thu Sep 05 2002 - 20:11:22 NZST

This archive was generated by hypermail 2.4.0 : Wed Nov 08 2023 - 11:53:43 NZDT