How to add a user that can't invoke the "su" command?

[Raposatul]

Any ideas?

Thanks.

PS: it would be great if it can do only ping, for example.

[jrtayloriv]

To make it where they can't run su, remove them from the 'wheel' group in the file /etc/group.

As far as limiting the programs they can run -- do a google search for chroot jails and see this page

--jrtayloriv
_________________
[URL="http://www.sporecollective.org"]The Spore Collective[/URL] -- surveillance, torture, genocide ... anarchist theory and social justice struggle ... peasant revolutions, and wealthy industrialists ... oh my what a mix!

[Raposatul]

[PaulBredbury]

You're looking at the wrong line. See the line beginning with the word "wheel".

[Raposatul]

Done, thanks