root su config

The config file (on FC) is /etc/pam.d/su.

One of the below lines must be uncommented

auth sufficient /lib/security//pam_wheel.so trust use_uid
auth required /lib/security//pam_wheel.so use_uid