Which statement is true?

The contents of /etc/pam.d/su file on a system are shown below.
[root@server1 ~]# cat /etc/pam.d/su
#%PAM-1.0
auth sufficient /lib/security/$ISA/pam_rootok.so
auth sufficient /lib/security/$ISA pam_wheel.so trust use_uid
#auth required /lib/security/$ISA pam_wheel.so use_uid
auth required /lib/security/$ISA/pam_stack.so service=system-auth
account required /lib/security/$ISA/pam_stack.so service=system-auth
password required /lib/security/$ISA/pam_stack.so service=system-auth
session required /lib/security/$ISA/pam_selinux.so close
session required /lib/security/$ISA/pam_stack.so service=system-auth
session required /lib/security/$ISA/pam_selinux.so open
session optional /lib/security/$ISA/pam_xauth.so
Which statement is true?

The contents of /etc/pam.d/su file on a system are shown below.
[root@server1 ~]# cat /etc/pam.d/su
#%PAM-1.0
auth sufficient /lib/security/$ISA/pam_rootok.so
auth sufficient /lib/security/$ISA pam_wheel.so trust use_uid
#auth required /lib/security/$ISA pam_wheel.so use_uid
auth required /lib/security/$ISA/pam_stack.so service=system-auth
account required /lib/security/$ISA/pam_stack.so service=system-auth
password required /lib/security/$ISA/pam_stack.so service=system-auth
session required /lib/security/$ISA/pam_selinux.so close
session required /lib/security/$ISA/pam_stack.so service=system-auth
session required /lib/security/$ISA/pam_selinux.so open
session optional /lib/security/$ISA/pam_xauth.so
Which statement is true?

A.
All normal users would be prohibited from using thesu command to switch to root’s account.

B.
All members of the wheel group would be prohibited from using thesu command to switch to
root’saccount.

C.
All members of the wheel group would be able to use thesu command to switch to root’s
account only by supplying the root password.

D.
All members of the wheel group would be able to use thesu command to switch to root’s
account without even supplying the root password.



Leave a Reply 0

Your email address will not be published. Required fields are marked *