<p dir="ltr">As root, su -s will provide a shell. As wheel group member with sudo, same results. As non-root user, no.</p>
<p dir="ltr">Seems like there should be a way to close off those with Pam but I've not thought about it before now. SeLinux will block su transitions easily.</p>
<div class="gmail_quote">On Aug 5, 2013 11:15 AM, "Derek Atkins" <<a href="mailto:warlord@mit.edu">warlord@mit.edu</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Jim Kinney <<a href="mailto:jim.kinney@gmail.com">jim.kinney@gmail.com</a>> writes:<br>
<br>
> These accounts can't be su'ed to :<br>
> # grep nologin /etc/passwd<br>
> bin:x:1:1:bin:/bin:/sbin/nologin<br>
> daemon:x:2:2:daemon:/sbin:/sbin/nologin<br>
> adm:x:3:4:adm:/var/adm:/sbin/nologin<br>
> lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin<br>
><br>
> # su - bin<br>
> This account is currently not available.<br>
> # su - lp<br>
> This account is currently not available.<br>
<br>
You could still su to these accounts by providing su a shell:<br>
<br>
su -s /bin/bash - bin<br>
<br>
-derek<br>
<br>
--<br>
Derek Atkins, SB '93 MIT EE, SM '95 MIT Media Laboratory<br>
Member, MIT Student Information Processing Board (SIPB)<br>
URL: <a href="http://web.mit.edu/warlord/" target="_blank">http://web.mit.edu/warlord/</a> PP-ASEL-IA N1NWH<br>
<a href="mailto:warlord@MIT.EDU">warlord@MIT.EDU</a> PGP key available<br>
_______________________________________________<br>
Ale mailing list<br>
<a href="mailto:Ale@ale.org">Ale@ale.org</a><br>
<a href="http://mail.ale.org/mailman/listinfo/ale" target="_blank">http://mail.ale.org/mailman/listinfo/ale</a><br>
See JOBS, ANNOUNCE and SCHOOLS lists at<br>
<a href="http://mail.ale.org/mailman/listinfo" target="_blank">http://mail.ale.org/mailman/listinfo</a><br>
</blockquote></div>