Re: [gNewSense-users] SSH: HostKey vs. AuthorizedKeysFile

[Sam Geeraerts]

Stayvoid wrote:
> I forgot about another thing.
> Does passwd use /etc/shadow by default?

Yes.

> How to delete/disable su?
> "Actually, the best solution is to remove su and switch to the sudo
> mechanism which has a broader logic and more features than su."
> This is the most detailed guide I've found. [3]
> But I don't think it's the right way to do it.

Editing /etc/pam.d/su should do the trick. Comment says "Uncomment this 
to force users to be a member of group root before they can use 'su'."

> [1] http://www.debian.org/doc/manuals/securing-debian-howto/ch3.en.html
> [2] http://www.debian.org/doc/manuals/securing-debian-howto/ch4.en.html
> [3] http://serverfault.com/questions/69216/disable-su-on-machine/69218#69218