From 90b12bd71bb9fc79a4640b9112c13ef529d0196a Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Fri, 5 Dec 2014 22:26:11 +0000 Subject: Initial commit --- doc/s6-setuidgid.html | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) create mode 100644 doc/s6-setuidgid.html (limited to 'doc/s6-setuidgid.html') diff --git a/doc/s6-setuidgid.html b/doc/s6-setuidgid.html new file mode 100644 index 0000000..f12ae04 --- /dev/null +++ b/doc/s6-setuidgid.html @@ -0,0 +1,49 @@ + + + + + s6: the s6-setuidgid program + + + + + + +

+s6
+Software
+skarnet.org +

+ +

The s6-setuidgid program

+ +

+s6-setuidgid executes a program as another user. +

+ +

Interface

+ +

+     s6-setuidgid account prog...
+

+ +

If account contains a colon, it is interpreted as uid:gid, +else it is interpreted as a username and looked up by name in the account +database.
If account is unknown, s6-setuidgid exits 1.
s6-setuidgid sets its (real and effective) uid and gid to those of account. +It also sets the list of supplementary groups to the correct one for account +according to the group database.
Then it executes into prog....

+ +

Notes

+ +

+ s6-setuidgid can only be run as root. Its main use is to drop root privileges before +starting a daemon. +

+ + + -- cgit v1.3.1