su to root with no password

From: chris los (clos@trentu.ca)
Date: Thu Sep 05 2002 - 16:10:56 EDT


How is it possible for a non-root account to "su -" and not have to
enter a password to obtain the root identity??

The only thing special about the non-root account i'm using is that it
is a member of group "0:system". This is a new behaviour we're seeing
and am wondering if it is this group membership alone that is
permitting the root identity without the password.

 Is it possible to disable this behaviour without removing the account
from system group? (ie force user to enter the password before obtaining
root)
 
TIA



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:48:51 EDT