my login.conf

admin|root:memoryuse=2000M:datasize=2000M:maxproc=3000:coredumpsize=0
guest|Goscie do X terminali:nologin=/etc/xterm.txt
default|default:memoryuse=128M:datasize=64M:maxproc=20:coredumpsize=0


so guest can't login with telnet, text terminal etc.. (it's used to log by 
xdm and xdm doesn't read login.conf)

but su - <any account in guest class> does work while it shouldn't

su(1) manual looks like su should respect it.

where is a problem?

thanks