[rsbac] secoff

[cnf]

hey all

is there a way i can block any access to secoff except fe serial login
within rsbac ?

mostly i would like to disable su - to secoff, and ssh login to secoff

now, i could use auth, and add every uid cept 400 for both su and sshd,
but that seems to be a bit cumbersome ...

anyway to set auth to allow setuid, except to this uid ?

or am i gonna have to dig deep into pam ? :-)

thnx
-- 
Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html