summaryrefslogtreecommitdiffstats
path: root/sys-utils/setpriv.1
diff options
context:
space:
mode:
Diffstat (limited to 'sys-utils/setpriv.1')
-rw-r--r--sys-utils/setpriv.17
1 files changed, 7 insertions, 0 deletions
diff --git a/sys-utils/setpriv.1 b/sys-utils/setpriv.1
index 099a4bc75..4aaaa63af 100644
--- a/sys-utils/setpriv.1
+++ b/sys-utils/setpriv.1
@@ -9,6 +9,11 @@ setpriv \- run a program with different Linux privilege settings
.SH DESCRIPTION
Sets or queries various Linux privilege settings that are inherited across
.BR execve (2).
+.PP
+The difference between the commands setpriv and su (or runuser) is that setpriv does
+not use open PAM session and does not ask for password. It's simple non-suid wrapper around
+.B execve
+syscall.
.SH OPTION
.TP
.B \-\-clear\-groups
@@ -142,6 +147,8 @@ For example, setting no_new_privs and then execing a program that is
SELinux\-confined (as this tool would do) may prevent the SELinux
restrictions from taking effect.
.SH SEE ALSO
+.BR su (1),
+.BR runuser (1),
.BR prctl (2),
.BR capability (7)
.SH AUTHOR