451 lines
14 KiB
Groff
451 lines
14 KiB
Groff
'\" t
|
|
.\" Title: su
|
|
.\" Author: Julianne Frances Haugh
|
|
.\" Generator: DocBook XSL Stylesheets v1.79.1 <http://docbook.sf.net/>
|
|
.\" Date: 01/02/2022
|
|
.\" Manual: Пользовательские команды
|
|
.\" Source: shadow-utils 4.11.1
|
|
.\" Language: Russian
|
|
.\"
|
|
.TH "su" "1" "01/02/2022" "shadow\-utils 4\&.11\&.1" "Пользовательские команды"
|
|
.\" -----------------------------------------------------------------
|
|
.\" * Define some portability stuff
|
|
.\" -----------------------------------------------------------------
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.\" http://bugs.debian.org/507673
|
|
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
|
|
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
|
.ie \n(.g .ds Aq \(aq
|
|
.el .ds Aq '
|
|
.\" -----------------------------------------------------------------
|
|
.\" * set default formatting
|
|
.\" -----------------------------------------------------------------
|
|
.\" disable hyphenation
|
|
.nh
|
|
.\" disable justification (adjust text to left margin only)
|
|
.ad l
|
|
.\" -----------------------------------------------------------------
|
|
.\" * MAIN CONTENT STARTS HERE *
|
|
.\" -----------------------------------------------------------------
|
|
.SH "НАЗВАНИЕ"
|
|
su \- изменяет ID пользователя или делает его суперпользователем
|
|
.SH "СИНТАКСИС"
|
|
.HP \w'\fBsu\fR\ 'u
|
|
\fBsu\fR [\fIпараметры\fR] [\fI\-\fR] [\fIимя_пользователя\fR\ [\ \fIargs\fR\ ]]
|
|
.SH "ОПИСАНИЕ"
|
|
.PP
|
|
The
|
|
\fBsu\fR
|
|
command is used to become another user during a login session\&. Invoked without a
|
|
\fBusername\fR,
|
|
\fBsu\fR
|
|
defaults to becoming the superuser\&. The
|
|
\fB\-\fR
|
|
option may be used to provide an environment similar to what the user would expect had the user logged in directly\&. The
|
|
\fB\-c\fR
|
|
option may be used to treat the next argument as a command by most shells\&.
|
|
.PP
|
|
Options are recognized everywhere in the argument list\&. You can use the
|
|
\fB\-\-\fR
|
|
argument to stop option parsing\&. The
|
|
\fB\-\fR
|
|
option is special: it is also recognized after
|
|
\fB\-\-\fR, but has to be placed before
|
|
\fBusername\fR\&.
|
|
.PP
|
|
Пользователю предложат ввести пароль, если он задан\&. При неверном пароле возникает сообщение об ошибке\&. Все попытки, удачные и неудачные, протоколируются системой с целью обнаружения злоупотреблений\&.
|
|
.PP
|
|
The current environment is passed to the new shell\&. The value of
|
|
\fB$PATH\fR
|
|
is reset to
|
|
/bin:/usr/bin
|
|
for normal users, or
|
|
/sbin:/bin:/usr/sbin:/usr/bin
|
|
for the superuser\&. This may be changed with the
|
|
\fBENV_PATH\fR
|
|
and
|
|
\fBENV_SUPATH\fR
|
|
definitions in
|
|
/etc/login\&.defs\&.
|
|
.PP
|
|
Субсистемный вход в систему можно распознать по наличию символа \(Fo*\(Fc в начале регистрационной оболочки\&. Заданный домашний каталог будет использован как корень новой файловой системы, в которой регистрируется пользователь\&.
|
|
.SH "ПАРАМЕТРЫ"
|
|
.PP
|
|
The options which apply to the
|
|
\fBsu\fR
|
|
command are:
|
|
.PP
|
|
\fB\-c\fR, \fB\-\-command\fR\ \&\fICOMMAND\fR
|
|
.RS 4
|
|
Specify a command that will be invoked by the shell using its
|
|
\fB\-c\fR\&.
|
|
.sp
|
|
The executed command will have no controlling terminal\&. This option cannot be used to execute interactive programs which need a controlling TTY\&.
|
|
.RE
|
|
.PP
|
|
\fB\-\fR, \fB\-l\fR, \fB\-\-login\fR
|
|
.RS 4
|
|
Предоставляет окружение, как если бы пользователь непосредственно регистрировался в системе\&.
|
|
.sp
|
|
When
|
|
\fB\-\fR
|
|
is used, it must be specified before any
|
|
\fBusername\fR\&. For portability it is recommended to use it as last option, before any
|
|
\fBusername\fR\&. The other forms (\fB\-l\fR
|
|
and
|
|
\fB\-\-login\fR) do not have this restriction\&.
|
|
.RE
|
|
.PP
|
|
\fB\-s\fR, \fB\-\-shell\fR\ \&\fISHELL\fR
|
|
.RS 4
|
|
Оболочка, которая будет запущена\&.
|
|
.sp
|
|
The invoked shell is chosen from (highest priority first):
|
|
.PP
|
|
.RS 4
|
|
The shell specified with \-\-shell\&.
|
|
.RE
|
|
.PP
|
|
.RS 4
|
|
If
|
|
\fB\-\-preserve\-environment\fR
|
|
is used, the shell specified by the
|
|
\fB$SHELL\fR
|
|
environment variable\&.
|
|
.RE
|
|
.PP
|
|
.RS 4
|
|
The shell indicated in the
|
|
/etc/passwd
|
|
entry for the target user\&.
|
|
.RE
|
|
.PP
|
|
.RS 4
|
|
/bin/sh
|
|
if a shell could not be found by any above method\&.
|
|
.RE
|
|
.sp
|
|
If the target user has a restricted shell (i\&.e\&. the shell field of this user\*(Aqs entry in
|
|
/etc/passwd
|
|
is not listed in
|
|
/etc/shells), then the
|
|
\fB\-\-shell\fR
|
|
option or the
|
|
\fB$SHELL\fR
|
|
environment variable won\*(Aqt be taken into account, unless
|
|
\fBsu\fR
|
|
is called by root\&.
|
|
.RE
|
|
.PP
|
|
\fB\-m\fR, \fB\-p\fR, \fB\-\-preserve\-environment\fR
|
|
.RS 4
|
|
Preserve the current environment, except for:
|
|
.PP
|
|
\fB$PATH\fR
|
|
.RS 4
|
|
reset according to the
|
|
/etc/login\&.defs
|
|
options
|
|
\fBENV_PATH\fR
|
|
or
|
|
\fBENV_SUPATH\fR
|
|
(see below);
|
|
.RE
|
|
.PP
|
|
\fB$IFS\fR
|
|
.RS 4
|
|
reset to
|
|
\(Fo<space><tab><newline>\(Fc, if it was set\&.
|
|
.RE
|
|
.sp
|
|
If the target user has a restricted shell, this option has no effect (unless
|
|
\fBsu\fR
|
|
is called by root)\&.
|
|
.sp
|
|
Note that the default behavior for the environment is the following:
|
|
.PP
|
|
.RS 4
|
|
The
|
|
\fB$HOME\fR,
|
|
\fB$SHELL\fR,
|
|
\fB$USER\fR,
|
|
\fB$LOGNAME\fR,
|
|
\fB$PATH\fR, and
|
|
\fB$IFS\fR
|
|
environment variables are reset\&.
|
|
.RE
|
|
.PP
|
|
.RS 4
|
|
If
|
|
\fB\-\-login\fR
|
|
is not used, the environment is copied, except for the variables above\&.
|
|
.RE
|
|
.PP
|
|
.RS 4
|
|
If
|
|
\fB\-\-login\fR
|
|
is used, the
|
|
\fB$TERM\fR,
|
|
\fB$COLORTERM\fR,
|
|
\fB$DISPLAY\fR, and
|
|
\fB$XAUTHORITY\fR
|
|
environment variables are copied if they were set\&.
|
|
.RE
|
|
.PP
|
|
.RS 4
|
|
If
|
|
\fB\-\-login\fR
|
|
is used, the
|
|
\fB$TZ\fR,
|
|
\fB$HZ\fR, and
|
|
\fB$MAIL\fR
|
|
environment variables are set according to the
|
|
/etc/login\&.defs
|
|
options
|
|
\fBENV_TZ\fR,
|
|
\fBENV_HZ\fR,
|
|
\fBMAIL_DIR\fR, and
|
|
\fBMAIL_FILE\fR
|
|
(see below)\&.
|
|
.RE
|
|
.PP
|
|
.RS 4
|
|
If
|
|
\fB\-\-login\fR
|
|
is used, other environment variables might be set by the
|
|
\fBENVIRON_FILE\fR
|
|
file (see below)\&.
|
|
.RE
|
|
.sp
|
|
.RE
|
|
.SH "ПРЕДОСТЕРЕЖЕНИЯ"
|
|
.PP
|
|
This version of
|
|
\fBsu\fR
|
|
has many compilation options, only some of which may be in use at any particular site\&.
|
|
.SH "НАСТРОЙКА"
|
|
.PP
|
|
The following configuration variables in
|
|
/etc/login\&.defs
|
|
change the behavior of this tool:
|
|
.PP
|
|
\fBCONSOLE\fR (string)
|
|
.RS 4
|
|
Если определена, то значение равно или полному пути к файлу с именами устройств (одно на строку), или списку имён устройств, перечисленных через \(Fo:\(Fc\&. Вход суперпользователя будет разрешён только с этих устройств\&.
|
|
.sp
|
|
Если не определена, то суперпользователь может входить в систему с любого устройства\&.
|
|
.sp
|
|
Устройства должны указываться без начального префикса /dev/\&.
|
|
.RE
|
|
.PP
|
|
\fBCONSOLE_GROUPS\fR (string)
|
|
.RS 4
|
|
List of groups to add to the user\*(Aqs supplementary groups set when logging in on the console (as determined by the CONSOLE setting)\&. Default is none\&.
|
|
|
|
Use with caution \- it is possible for users to gain permanent access to these groups, even when not logged in on the console\&.
|
|
.RE
|
|
.PP
|
|
\fBDEFAULT_HOME\fR (boolean)
|
|
.RS 4
|
|
Определяет, можно ли войти в систему, если нельзя выполнить cd в домашний каталог\&. По умолчанию \(Fono\(Fc\&.
|
|
.sp
|
|
If set to
|
|
\fIyes\fR, the user will login in the root (/) directory if it is not possible to cd to her home directory\&.
|
|
.RE
|
|
.PP
|
|
\fBENV_HZ\fR (string)
|
|
.RS 4
|
|
If set, it will be used to define the HZ environment variable when a user login\&. The value must be preceded by
|
|
\fIHZ=\fR\&. A common value on Linux is
|
|
\fIHZ=100\fR\&.
|
|
.RE
|
|
.PP
|
|
\fBENVIRON_FILE\fR (string)
|
|
.RS 4
|
|
Если этот файл существует и доступ для чтения, то из него читает регистрационное окружение\&. Каждая строка должна иметь формат: имя=значение\&.
|
|
.sp
|
|
Строки, начинающиеся с #, считаются комментарием и игнорируются\&.
|
|
.RE
|
|
.PP
|
|
\fBENV_PATH\fR (string)
|
|
.RS 4
|
|
If set, it will be used to define the PATH environment variable when a regular user login\&. The value is a colon separated list of paths (for example
|
|
\fI/bin:/usr/bin\fR) and can be preceded by
|
|
\fIPATH=\fR\&. The default value is
|
|
\fIPATH=/bin:/usr/bin\fR\&.
|
|
.RE
|
|
.PP
|
|
\fBENV_SUPATH\fR (string)
|
|
.RS 4
|
|
If set, it will be used to define the PATH environment variable when the superuser login\&. The value is a colon separated list of paths (for example
|
|
\fI/sbin:/bin:/usr/sbin:/usr/bin\fR) and can be preceded by
|
|
\fIPATH=\fR\&. The default value is
|
|
\fIPATH=/sbin:/bin:/usr/sbin:/usr/bin\fR\&.
|
|
.RE
|
|
.PP
|
|
\fBENV_TZ\fR (string)
|
|
.RS 4
|
|
If set, it will be used to define the TZ environment variable when a user login\&. The value can be the name of a timezone preceded by
|
|
\fITZ=\fR
|
|
(for example
|
|
\fITZ=CST6CDT\fR), or the full path to the file containing the timezone specification (for example
|
|
/etc/tzname)\&.
|
|
.sp
|
|
If a full path is specified but the file does not exist or cannot be read, the default is to use
|
|
\fITZ=CST6CDT\fR\&.
|
|
.RE
|
|
.PP
|
|
\fBLOGIN_STRING\fR (string)
|
|
.RS 4
|
|
Строка\-приглашение к вводу пароля\&. Значение по умолчанию: \(FoPassword:\(Fc или перевод этой строки на разные языки\&. Если вы измените эту переменную, то перевод будет отсутствовать\&.
|
|
.sp
|
|
If the string contains
|
|
\fI%s\fR, this will be replaced by the user\*(Aqs name\&.
|
|
.RE
|
|
.PP
|
|
\fBMAIL_CHECK_ENAB\fR (boolean)
|
|
.RS 4
|
|
Включает проверку и показ состояния почтового ящика при входе\&.
|
|
.sp
|
|
Вы должны выключить это, если почтовый ящик проверяется из файлов автозапуска оболочки (\(Fomailx \-e\(Fc или похожей командой)\&.
|
|
.RE
|
|
.PP
|
|
\fBMAIL_DIR\fR (string)
|
|
.RS 4
|
|
The mail spool directory\&. This is needed to manipulate the mailbox when its corresponding user account is modified or deleted\&. If not specified, a compile\-time default is used\&. The parameter CREATE_MAIL_SPOOL in
|
|
/etc/default/useradd
|
|
determines whether the mail spool should be created\&.
|
|
.RE
|
|
.PP
|
|
\fBMAIL_FILE\fR (string)
|
|
.RS 4
|
|
Определяет расположение почтовых файлов пользователя относительно домашнего каталога\&.
|
|
.RE
|
|
.PP
|
|
The
|
|
\fBMAIL_DIR\fR
|
|
and
|
|
\fBMAIL_FILE\fR
|
|
variables are used by
|
|
\fBuseradd\fR,
|
|
\fBusermod\fR, and
|
|
\fBuserdel\fR
|
|
to create, move, or delete the user\*(Aqs mail spool\&.
|
|
.PP
|
|
If
|
|
\fBMAIL_CHECK_ENAB\fR
|
|
is set to
|
|
\fIyes\fR, they are also used to define the
|
|
\fBMAIL\fR
|
|
environment variable\&.
|
|
.PP
|
|
\fBQUOTAS_ENAB\fR (boolean)
|
|
.RS 4
|
|
Enable setting of resource limits from
|
|
/etc/limits
|
|
and ulimit, umask, and niceness from the user\*(Aqs passwd gecos field\&.
|
|
.RE
|
|
.PP
|
|
\fBSULOG_FILE\fR (string)
|
|
.RS 4
|
|
Если определена, то любая активность su будет протоколироваться в этот файл\&.
|
|
.RE
|
|
.PP
|
|
\fBSU_NAME\fR (string)
|
|
.RS 4
|
|
Если определена, то выводится имя команды когда работает \(Fosu \-\(Fc\&. Например, если значение равно \(Fosu\(Fc, то \(Fops\(Fc покажет команду как \(Fo\-su\(Fc\&. Если не определена, то \(Fops\(Fc покажет имя запускаемой оболочки например как \(Fo\-sh\(Fc\&.
|
|
.RE
|
|
.PP
|
|
\fBSU_WHEEL_ONLY\fR (boolean)
|
|
.RS 4
|
|
If
|
|
\fIyes\fR, the user must be listed as a member of the first gid 0 group in
|
|
/etc/group
|
|
(called
|
|
\fIroot\fR
|
|
on most Linux systems) to be able to
|
|
\fBsu\fR
|
|
to uid 0 accounts\&. If the group doesn\*(Aqt exist or is empty, no one will be able to
|
|
\fBsu\fR
|
|
to uid 0\&.
|
|
.RE
|
|
.PP
|
|
\fBSYSLOG_SU_ENAB\fR (boolean)
|
|
.RS 4
|
|
Enable "syslog" logging of
|
|
\fBsu\fR
|
|
activity \- in addition to sulog file logging\&.
|
|
.RE
|
|
.PP
|
|
\fBUSERGROUPS_ENAB\fR (boolean)
|
|
.RS 4
|
|
Включает установку группы битов umask равной битам владельца (пример: 022 \-> 002, 077 \-> 007) для не суперпользователей, если uid равен gid и имя пользователя совпадает с именем первичной группы\&.
|
|
.sp
|
|
If set to
|
|
\fIyes\fR,
|
|
\fBuserdel\fR
|
|
will remove the user\*(Aqs group if it contains no more members, and
|
|
\fBuseradd\fR
|
|
will create by default a group with the name of the user\&.
|
|
.RE
|
|
.SH "ФАЙЛЫ"
|
|
.PP
|
|
/etc/passwd
|
|
.RS 4
|
|
содержит информацию о пользователях
|
|
.RE
|
|
.PP
|
|
/etc/shadow
|
|
.RS 4
|
|
содержит защищаемую информацию о пользователях
|
|
.RE
|
|
.PP
|
|
/etc/login\&.defs
|
|
.RS 4
|
|
содержит конфигурацию подсистемы теневых паролей
|
|
.RE
|
|
.SH "ВОЗВРАЩАЕМЫЕ ЗНАЧЕНИЯ"
|
|
.PP
|
|
On success,
|
|
\fBsu\fR
|
|
returns the exit value of the command it executed\&.
|
|
.PP
|
|
If this command was terminated by a signal,
|
|
\fBsu\fR
|
|
returns the number of this signal plus 128\&.
|
|
.PP
|
|
If su has to kill the command (because it was asked to terminate, and the command did not terminate in time),
|
|
\fBsu\fR
|
|
returns 255\&.
|
|
.PP
|
|
Some exit values from
|
|
\fBsu\fR
|
|
are independent from the executed command:
|
|
.PP
|
|
\fI0\fR
|
|
.RS 4
|
|
success (\fB\-\-help\fR
|
|
only)
|
|
.RE
|
|
.PP
|
|
\fI1\fR
|
|
.RS 4
|
|
System or authentication failure
|
|
.RE
|
|
.PP
|
|
\fI126\fR
|
|
.RS 4
|
|
The requested command was not found
|
|
.RE
|
|
.PP
|
|
\fI127\fR
|
|
.RS 4
|
|
The requested command could not be executed
|
|
.RE
|
|
.SH "СМОТРИТЕ ТАКЖЕ"
|
|
.PP
|
|
\fBlogin\fR(1),
|
|
\fBlogin.defs\fR(5),
|
|
\fBsg\fR(1),
|
|
\fBsh\fR(1)\&.
|