Sorry. following way does NOT work. user1 (ALL)=user2 /bin/bash Leave off su entirely and sudo -H user2 -i as user1 --- 10/8/19 (四)，James Hogarth <james.hogarth at gmail.com> 寫道： 寄件者: James Hogarth <james.hogarth at gmail.com> 主旨: Re: [CentOS] how to setup account which can 'su" to another account (NON-root)? 收件者: "CentOS mailing list" <centos at centos.org> 日期: 2010年8月19日,四,上午11:22 Better still would be user1 (ALL)=user2 /bin/bash Leave off su entirely and sudo -H user2 -i as user1 On 19 Aug 2010 15:57, "mcclnx mcc" <mcclnx at yahoo.com.tw> wrote: > This work correctly. Thanks. > > --- 10/8/19 (四)，John Kennedy <skebi69 at gmail.com> 寫道： > > 寄件者: John Kennedy <skebi69 at gmail.com> > 主旨: Re: [CentOS] how to setup account which can 'su" to another account (NON-root)? > 收件者: "CentOS mailing list" <centos at centos.org> > 日期: 2010年8月19日,四,上午10:00 > > > > On Thu, Aug 19, 2010 at 9:56 AM, mcclnx mcc <mcclnx at yahoo.com.tw> wrote: > > Thank you for answer. The problem I have is "user1" need "su" privilege. If I grant "su" privilege, it can "su" to anyone. What I want is user1 can ONLY "su" to user2. > > > > > my /etc/sudoers setup: > > > > # User privilege specification > > root ALL=(ALL) ALL > > user1 ALL=(root) /bin/su > > > > > > any ideal to fix it? > > > > > > > Use complete command like this:user1 ALL=(root) /bin/su - user2This will limit user1 to that specific command. You can add -NOPASSWD and user1 will not have to enter their password. > John-- > John Kennedy > > > > -----內含下列夾帶檔案----- > > _______________________________________________ > CentOS mailing list > CentOS at centos.org > http://lists.centos.org/mailman/listinfo/centos > > > > -----內含下列夾帶檔案----- _______________________________________________ CentOS mailing list CentOS at centos.org http://lists.centos.org/mailman/listinfo/centos -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/pipermail/centos/attachments/20100820/f4dcf4df/attachment-0005.html>