Plant, Dean wrote: > What I was trying to point out is that if is he is disabling commands > like su then they must be enabled somewhere in the groups he is calling > and it is good practice to disable all the shells as well. All my > sudoers lines that call groups like he was trying to do always have a > !SU, !SHELLS to specifically deny root access. > Noted. > Anyway I will shut up now as none of this will help fix his problem. > Ditto :-)