John M. Anderson wrote:
I'm not sure if this is what you're looking for but if the user isn't in the wheel group, They shouldn't beable to su at all.
seems to me it IS what he is looking for