Permissions for /bin/su

This policy defines permissions for /bin/su

Any user — Any user is permitted to run /bin/su

Wheel superusers — Any user has the right to run /bin/su, but only users of the «wheel» group can elevate privileges to the superuser

Only wheel — Only users of the «wheel» group are allowed to run /bin/su

Only root — Only superuser (root) is permitted to run /bin/su

Who has the right to use:

0. Any user is permitted to run /bin/su
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\BaseALT\Policies\Control
   Value Name	su
   Value Type	REG_SZ
   Value	public

1. Wheel superusers
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\BaseALT\Policies\Control
   Value Name	su
   Value Type	REG_SZ
   Value	wheel

2. Only wheel
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\BaseALT\Policies\Control
   Value Name	su
   Value Type	REG_SZ
   Value	wheelonly

3. Only root
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\BaseALT\Policies\Control
   Value Name	su
   Value Type	REG_SZ
   Value	restricted