Reasons for restricting su privilege?

[David Brown]

  I'm having a problem convincing some of the people around
  here of the dangers of having several super users.  One of
  our faculty members insists upon having the privilege,
  for whenever one of the normal super users isn't around.  I've
  tried every argument I know, all to no avail.  Any hints?
  Any new arguments?  For that matter, give me the old arguments.
  I'm not asking for detailed 'holes', all I want are valid reasons
  for restricting the su privilege.

  Also, just in case I lose this one, does anyone know of a 'restricted
  super-user' program?  One that just allows some things to be done.
  I'm afraid I'll need to write one, and I don't want to 'reinvent the wheel'.

  Might better e-mail me any responses; there is probably a LOT to say
  on the issue.  If there is interest, I'll post a summary.

 Thanks,
  David Brown

----------------------------------------------------------------------------
David Brown
Armstrong State College, Savannah, Georgia
uucp: ...!{akgua,allegra,amd,hplabs,ihnp4,seismo,ut-ngp}!gatech!gitpyr!david
ARPA: david at pyr.gatech.edu