COSmanager User Man pages

From Documentation

Revision as of 04:16, 1 May 2006

asgroup

NAME

asgroup — Run a program with another group's permissions

SYNOPSIS

asgroup <group> [<command>]

DESCRIPTION

Asgroup changes the effective group ID of the user to the specified group while running command. If no command was specified, an interactive Shell will be started, either using the program defined by the SHELL environment variable, or /bin/sh if SHELL is not defined. Asgroup will only permit execution to proceed if either:

• The user is part of the specified group; or
• The command's group is the one specified, and it has the set group ID bit enabled [see chmod(1)], and the user has execute access to the command.
  All attempts (both successful and not) are logged to an audit trail.

FILES

/usr/spool/log/asgroup

Audit log file. Every execution of asgroup is logged here detailing the user, terminal, date andtime, the command and whether it was successful.

SEE ALSO

fs_tools(1).

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

asuser

NAME

asuser - Run a program as another user

SYNOPSIS

asuser [-12cdosu] <user> <command>

DESCRIPTION

Asuser runs a command in the context of another user. It is normally only run by a process with the effective user ID of the superuser.

Switching to the specified user causes the process to switch to that user's ID and Groups, plus the following environment variables to be set: LOGNAME, USER, HOME and FULLNAME.

OPTIONS

-c

Check that the caller's effective ID is superuser before running the command. By default, if the caller is not superuser, the command is still run, but without switching users.

-d

Change into the user's home directory before running the command, and before creating any output files (see the -o, -1 and -2 options). Normally the command is run in the current working directory.

-s

Run the command using the shell. This allows arbitrary shell syntax to be used in the command. Normally the command must be a single program name, optionally followed by its parameters.

-u <ulimit>

Set the ulimit to the specified value prior to running the command.

-o <file>

Redirect both STDOUT and STDERR to the given file after switching to the new user. If the file does not exist, it will be created with the ownership of the given user. Note that if you use:

asuser <user> <command> > <file>

the file will be opened by the shell prior to running asuser, causing it to be created with "root" ownership.

-1 <file>

Redirect STDOUT to the given file after switching to the new user. Please refer to the discussion under -o.

-2 <file>

Redirect STDERR to the given file after switching to the new user. Please refer to the discussion under -o.

EXAMPLE

asuser mike weekly_report -d prodn

Runs the command "weekly_report -d prodn" as user "mike".

WARNINGS

This program must not be installed with the SETUID flag set, otherwise system security would be compromised.

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

audcycle

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

audit

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

audview

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

browser

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

cos

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

daemon

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

fs_tools

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

menu

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

methtool

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

page

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

root

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

runopt

COPYRIGHT

Copyright © 1990-2006 Functional Software. All rights reserved.

scroll