what would you suggest to solve this problem?

The user smith on server1 is trying to switch to the root account by using the su command and it
fails. The contents of the /etc/pam.d/su file are shown below:
[smith@server1 ~]# cat /etc/pam.d/su
#%PAM-1.0
auth sufficient /lib/security/$ISA/pam_rootok.so
auth required /lib/security/$ISA pam_wheel.so use_uid
auth required /lib/security/$ISA/pam_stack.so service=system-auth
account required /lib/security/$ISA/pam_stack.so service=system-auth password required
/lib/security/$ISA/pam_stack.so service=system-auth session required
/lib/security/$ISA/pam_selinux.so close
session required /lib/security/$ISA/pam_stack.so service=system-auth session required
/lib/security/$ISA/pam_selinux.so open
session optional /lib/security/$ISA/pam_xuath.so
As a Linux administrator, what would you suggest to solve this problem?

The user smith on server1 is trying to switch to the root account by using the su command and it
fails. The contents of the /etc/pam.d/su file are shown below:
[smith@server1 ~]# cat /etc/pam.d/su
#%PAM-1.0
auth sufficient /lib/security/$ISA/pam_rootok.so
auth required /lib/security/$ISA pam_wheel.so use_uid
auth required /lib/security/$ISA/pam_stack.so service=system-auth
account required /lib/security/$ISA/pam_stack.so service=system-auth password required
/lib/security/$ISA/pam_stack.so service=system-auth session required
/lib/security/$ISA/pam_selinux.so close
session required /lib/security/$ISA/pam_stack.so service=system-auth session required
/lib/security/$ISA/pam_selinux.so open
session optional /lib/security/$ISA/pam_xuath.so
As a Linux administrator, what would you suggest to solve this problem?

A.
The user smith should have UID less than 500.

B.
The user smith should be added as a member of the wheel group.

C.
The Security Enhanced Linux (SELinux) on the system should be disabled.

D.
The user smith should be removed from the wheel system group because the group
membership does not allow him to usesu.

E.
The Pluggable Authentication Modules (PAM) control values of the modules checking the
pam_stack.so module should be changed to sufficient.



Leave a Reply 0

Your email address will not be published. Required fields are marked *