Securing Linux,enabling an user to be root only if it is in wheel group

nano /etc/pam.d/su

go to

#Uncomment the following line to require a user to be in the "wheel" group.
#auth                   required                          pam_wheel.so use_uid

uncomment the line so that it looks like 

auth                   required                          pam_wheel.so use_uid