HowTo: Preventing Users from su, While Keeping the Capability of sudo
Updated -
Each Linux user is mapped to an SELinux user using SELinux policy.
Users mapped to unconfined_u are unconfined,
which mean they are not restricted by SELinux user policies and can do anything
if not denied by other policies.
However, it may be more desirable granting regular users to perform non-adminstrative tasks,
as well as some adminstrative task...
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
