Native question: if you can `sudo`, can't you just `sudo bash`? What can you do with `su` that you couldn't do with `sudo bash`?
Or is the wheel group not really about being able to sudo?
Or is the wheel group not really about being able to sudo?
`su` predates `sudo` by a decade doesn’t offer the fine-grained control `sudo` has. With `su` if you have the root password, you can do anything you want as root. With `sudo` admins can configure what commands users are allowed to run as root and could specifically block `sudo bash` from running.
Wheel users can do anything because (default) sudoers contains
%wheel ALL=(ALL) ALL