Re: GNU su and the wheel group

[Klaus von der Heyde]

Martin Guy wrote:

> In general, su-ing from an insecure account to a secure one is a no-no
> since the insecure account can have its own program called "su" in
> $HOME/bin which turns character echo off, prints "Password: ",

A good reason not to put $HOME/bin anywhere except the last position
in $PATH... or not have it in $PATH at all.

Using su from an user account is often used on systems being
adminstrated over an ssh connection, when root login via ssh is
disabled. The security-aware sysadmin may call /bin/su (or whereever
the original su is) explicitly.

Klaus