Prevent user from running su

If you want to prevent user foo from running command su then do this:

1. sudo grouadd nosu
2. sudo usermod -a -G nosu foo
3. sudo vi /etc/pam.d/su and uncomment
   auth required pam_wheel.so deny group=nosu