if you are reading this topic its probably because you want to disable or restrict access to a user for using the su command to gain access to the superuser account. i will show you what file you need to edit.

the file you will need to edit is the /etc/pam.d/su

you can find the file by listing all the file in the /etc/pam.d/ directory:

# ls /etc/pam.d/

there, you will see the su file, you can edit using your favorite text editor. (like VI for example) i like to use nano instead so you can send this command to edit the su file

# nano /etc/pam.d/su