From c424fd834b4845971e9ce5ef3d7325f6f4e6b163 Mon Sep 17 00:00:00 2001 From: Karel Zak Date: Thu, 18 Aug 2016 11:12:44 +0200 Subject: su, runuser, setpriv: create links between man pages .. and add notes about differences between the utuils. Reported-by: Lennart Poettering Signed-off-by: Karel Zak --- sys-utils/setpriv.1 | 7 +++++++ 1 file changed, 7 insertions(+) (limited to 'sys-utils/setpriv.1') diff --git a/sys-utils/setpriv.1 b/sys-utils/setpriv.1 index 099a4bc75..4aaaa63af 100644 --- a/sys-utils/setpriv.1 +++ b/sys-utils/setpriv.1 @@ -9,6 +9,11 @@ setpriv \- run a program with different Linux privilege settings .SH DESCRIPTION Sets or queries various Linux privilege settings that are inherited across .BR execve (2). +.PP +The difference between the commands setpriv and su (or runuser) is that setpriv does +not use open PAM session and does not ask for password. It's simple non-suid wrapper around +.B execve +syscall. .SH OPTION .TP .B \-\-clear\-groups @@ -142,6 +147,8 @@ For example, setting no_new_privs and then execing a program that is SELinux\-confined (as this tool would do) may prevent the SELinux restrictions from taking effect. .SH SEE ALSO +.BR su (1), +.BR runuser (1), .BR prctl (2), .BR capability (7) .SH AUTHOR -- cgit v1.2.3-55-g7522