> 5.3-RC1 and now su lets > me into root without a password, I really don't like this. > I think that the problem lies in the configuration > file /etc/pam.d/su . My /etc/pam.d/su on 5.3 stable does not have an include-line. Did you 'mergemaster -p' berfore mergemaster? Claus