pam_wheel

Require wheel group for su

$ auth required pam_wheel.so

$ auth required pam_wheel.so root_only

$ auth required pam_wheel.so group=admin

$ auth sufficient pam_wheel.so trust

pam_wheel.so [options]

pam_wheel restricts su to wheel group. Controls root access.
The module requires group membership. Traditional Unix security.
pam_wheel limits su access.

root_only

Only apply for su to root.

Use alternate group.

Trust group members (no password).

Deny access to group members.

Auth module. Wheel group required. BSD-style security.

pam_wheel provides wheel group restriction for su command access.

pam(8), su(1), pam_rootok(8)