특정 사용자만 root 로그인 가능

1. pam.d 수정하기

 

[root@localhost]#vi /etc/pam.d

 

#%PAM-1.0
auth required /lib/security/pam_wheel.so debug group=wheel ==> 추가
auth sufficient /lib/security/pam_rootok.so ==> 추가

# Uncomment the following line to implicitly trust users in the "wheel" group.
#auth sufficient /lib/security/pam_wheel.so trust use_uid
# Uncomment the following line to require a user to be in the "wheel" group.
#auth required /lib/security/pam_wheel.so use_uid
auth required /lib/security/pam_stack.so service=system-auth
account required /lib/security/pam_stack.so service=system-auth
password required /lib/security/pam_stack.so service=system-auth
session required /lib/security/pam_stack.so service=system-auth
session optional /lib/security/pam_xauth.so

2. su 명령어 사용계정 등록하기

 

[root@localhost]# vi /etc/group

root:x:0:root
bin:x:1:root,bin,daemon
daemon:x:2:root,bin,daemon,named
sys:x:3:root,bin
tty:x:5:
disk:x:6:root
mem:x:8:
kmem:x:9:
wheel:x:10:root,ehost ====> su명령어를 사용하여 root권한을 가질수있는 계정등록

 

 

이호스트 데이터센터 운영팀 : www.ehostidc.co.kr