≡ Menu

distro

Thousands of readers have voted and results are out now. Here are the tools you and me use every day in work and play. It is a good list and as expected FireFox is the best browser, Ubuntu Linux is the best distro and Thunderbird is the best mail client :)

See all the results online at Linux journals website.

News Roundup

=> KDE 4 Review : Ars Technica reviews KDE 4.0 - KDE 4.0 was officially released last week after extensive development. The long-awaited 4.0 release ushers in a new era for the popular open-source desktop environment and adds many intriguing new features and technologies. Unfortunately, the release comes with almost as many new bugs as it does features, and there is much work to be done before it sparkles like the 3.5.x series.

=> Humor : Intelligent atheist white man seeks sweetie // Help me keep the shell people alive

=> Every aspect of computer users' lives — from their heartbeat to a guilty smile -- could be monitored and immediately analysed under the futuristic system detailed in Microsoft’s patent application.

=> Asus Launches Windows Version of its Eee PC - Hackers no longer have to resort to their own devices to get Windows on Asus's Eee PC.

=> Crispin Cowan, the Linux security expert behind StackGard, the Immunix Linux distro and AppArmor, has joined the Windows security team.

Restrict the use of su command

su is used to become another user during a login session. Invoked without a username, su defaults to becoming the super user. The user will be prompted for a password, if appropriate. Invalid passwords will produce an error message. All attempts, both valid and invalid, are logged to detect abuses of the system.

By default almost all distro allows to use su command. However you can restrict the use of su command for security reasons.

Both UNIX and Linux have a group called wheel. If user is member of this group she can use su command. We can add user to this group.

For example add existing user rocky to wheel group
# usermod -G wheel rocky

Now open /etc/pam.d/su PAM config file:
# vi /etc/pam.d/su
Append line as follows:
auth required /lib/security/pam_wheel.so use_uid
OR
auth required pam_wheel.so use_uid

Save and close the file.

Because of above setting only members of the administrative group wheel can use the su command. However I still recommend sudo over su for better control, security and ease of use. This is also default behavior on FreeBSD.