pam_supair is a PAM module for use with su(1) that authenticates the user if and only if that user's name (obtained via that user's real id) and su's target user name (obtained via pam_get_user(3)) form a pair that is allowed by the configuration. Multiple pairs can be specified.
