diff --git a/etc/pam.d/su b/etc/pam.d/su
index 834c27e08b8e..88ce8b0ab4f1 100644
--- a/etc/pam.d/su
+++ b/etc/pam.d/su
@@ -7,7 +7,7 @@
 # auth
 auth		sufficient	pam_rootok.so		no_warn
 auth		sufficient	pam_self.so		no_warn
-auth		requisite	pam_group.so		no_warn group=wheel root_only fail_safe
+auth		requisite	pam_group.so		no_warn group=wheel root_only fail_safe ruser
 auth		include		system
 
 # account