Permission to use /usr/bin/chsh

The policy allows you to control access rights to the chsh command (/usr/bin/chsh), which changes the user login shell: this defines the name of the initial user login command; an ordinary user can change the login shell only for his account; superuser can change login shell for any account

All users — All users are allowed to use /usr/bin/chsh

Only root — Only superuser (root) can use /usr/bin/chsh

Who can use:

0. All users
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\BaseALT\Policies\Control
   Value Name	chsh
   Value Type	REG_SZ
   Value	public

1. Only root
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\BaseALT\Policies\Control
   Value Name	chsh
   Value Type	REG_SZ
   Value	restricted