Re: What groups does a desktop power-user need to belong to?
On Wed, 10 Aug 2011 14:39:27 -0400
Robert Isaac <firstname.lastname@example.org> wrote:
> I understand that, however _all_ users can gain root with gnu su,
> effectively defeating the purpose of groups if you don't configure
> pam_wheel beyond its default.
no, root password must be held by administrator only, not _all_ users
of a system, if a app need more privileges a admin should enable the
specified yuser with the special requirement on sudoears list, but NOT
all user can use "su" and use root password to gain uid0 level