S6-SETUIDGID(8)

NAME
s6-setuidgid - execute a program as another user

SYNOPSIS
s6-setuidgid account prog...

DESCRIPTION
If account is the empty string, then s6-setuidgid directly exec(3) s into prog... without any state changes. If account contains a colon, it is interpreted as ‘ uid: gid ’ else it is interpreted as a username and looked up by name in the account database.

If account is unknown, s6-setuidgid exits 1. s6-setuidgid sets its (real and effective) uid and gid to those of account. It also sets the list of supplementary groups to the correct one for account according to the group database.

Then it executes into prog....

Unless account is empty, s6-setuidgid can only be run as root. Its main use is to drop root privileges before starting a daemon.

SEE ALSO
s6-applyuidgid(8), s6-envdir(8), s6-envuidgid(8), s6-fghack(8), s6-setsid(8), s6-softlimit(8), s6-tai64n(8), s6-tai64nlocal(8)

This man page is ported from the authoritative documentation at: https://skarnet.org/software/s6/s6-setuidgid.html

AUTHORS
Laurent Bercot Alexis <flexibeast@gmail.com> (man page port)