SUMMARY: Need to restrict user account login to su only (Solaris 7)

First, thanks for all that replied.

The overall almost unanimous answer to this question was to install "sudo"

http://www.courtesan.com/sudo/




>Sunmanagers,
>   My apologies if this question has been answered before- My search of the
>archives came up empty.
>   I have a need to disable remote log-in for the Oracle dba account - yet I
>need the Oracle adm's to be able to SU to the Oracle account. Just need to
>keep them from logging directly into that account. To much finger pointing,
>not enough evidence.
>    This is very similar to the /etc/default/login file and the line
>CONSOLE=/dev/console
>
>   I am open to ideas - if someone has found another way to log/control the
>shared accounts like Oracle, please let me know.
>
>Thanks