From owner-freebsd-bugs  Sun Feb 23 12:09:02 1997
Return-Path: <owner-bugs>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id MAA29972
          for bugs-outgoing; Sun, 23 Feb 1997 12:09:02 -0800 (PST)
Received: from gvr.win.tue.nl (root@gvr.win.tue.nl [131.155.210.19])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id MAA29966;
          Sun, 23 Feb 1997 12:08:55 -0800 (PST)
Received: (from guido@localhost) by gvr.win.tue.nl (8.8.5/8.8.2) id VAA00485; Sun, 23 Feb 1997 21:08:14 +0100 (MET)
From: Guido van Rooij <guido@gvr.win.tue.nl>
Message-Id: <199702232008.VAA00485@gvr.win.tue.nl>
Subject: Re: bin/1882
In-Reply-To: <199702231337.PAA29102@grackle.grondar.za> from Mark Murray at "Feb 23, 97 03:37:39 pm"
To: mark@grondar.za (Mark Murray)
Date: Sun, 23 Feb 1997 21:08:14 +0100 (MET)
Cc: joerg_wunsch@uriah.heep.sax.de, mpp@freefall.freebsd.org,
        freebsd-bugs@freefall.freebsd.org
X-Mailer: ELM [version 2.4ME+ PL28 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-bugs@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> > 
> > Are you sure?  The PR (see subject) seems to tell otherwise, and even
> > suggests a patch to get exact this behaviour.
> 
> When in doubt, RTSL. There is a define that you can frob in su
> to turn this on/off - WHEELSU.

That's not the issue here. What is wanted is that wheel, when non-empty
determines if you can su to root. When it is empty, su should not
pose any limits on who can su to root.

WHEELSU completely disables checking for who's in wheel.

-Guido