- Su (Unix)
su ("substitute user" or "switch user") is a
Unix command used to run the shell of another user without logging out. It is commonly used to change to root user permissions for administrative work without logging off and back on; it is also used to switch to other users in the same way. Desktop environments such asKDE andGNOME have programs that pop up a password query box before allowing a user to run commands that would typically require such access.When invoked without a target user, the root user is assumed (identical to su root).
Usage
When run from a
command line , as is typical, su asks for the target user's password, and, if accepted, grants the user access to that account and all of the files associated with it.Additionally, one can switch to another user who is not the superuser; e.g. su jane.
Optionally, a hyphen can be used to invoke a login shell and assume the target user's complete user environment:
A related command called
sudo executes a command as another user but observes a set of constraints about which users can execute which commands as which other users (generally in a configuration file named /etc/sudoers, best editable by the command visudo). Unlike su, sudo authenticates users against their own password rather than that of the target user (to allow the delegation of specific commands to specific users on specific hosts without sharing passwords among them and while mitigating the risk of any unattended terminals).Some Unix-like systems have a "wheel" group of users, and only allow these users to su to root.cite book|title=UNIX Administration: A Comprehensive Sourcebook for Effective Systems and Network Management |first=Bozidar |last=Levi |publisher=CRC Press |year=2002 |pages=p207 |isbn=0849313511] This may or may not mitigate these security concerns, since an intruder might first simply break into one of those accounts.
GNU su, however, does not support a wheel group; this was done for philosophical reasons. [cite web |url=http://www.gnu.org/software/coreutils/manual/html_node/su-invocation.html#index-MIT-AI-lab-2101 |title=Why GNU su does not support the wheel group]ee also
*
Unix security
*List of Unix programs
*Comparison of privilege authorization features References
External links
* [http://www.gnu.org/software/coreutils/manual/html_node/su-invocation.html su] — manual pages from
GNU coreutils .
*man|1|su
* [http://www.linfo.org/su.html The su command] — by The Linux Information Project (LINFO)
* [http://dictionary.die.net/su Definition of su] — dictionary.die.net
* [http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/runas.mspx runas] — Windows XP has a similar command
Wikimedia Foundation. 2010.