Thanks Michael for your reply.

RBAC isn't an option now. I run 5.3 in a huge environment. It will take years untill the complete 6.1 migration.

I did not give up and if someone has a candle please show up.

Cheers

Hi, It's my first post here. But I'm a very old rootvg user.

How do you guys filter shell escapes on AIX? I have seen that the latest sudoers claims to filter it, however I keep having this error when I try to change accounts:

sudo su - rr5tzu
3004-505 Cannot set process environment.

$ sudo -V
Sudo version 1.6.9p15

Thanks a lot