/etc/security/user 文件里有项属性“su”可以控制能否su到某用户,如下: su Indicates whether another user can switch to the specified user account with the su command. Possible values are: true Another user can switch to the specified account. This is the default. false Another user cannot switch to the specified account