runuser(1) that does not require authentication and provide separate PAM configuration. If the PAM session is not required at all then the recommend solution is to use command setpriv(1).ENV_SUPATH (string)session required pam_lastlog.so nowtmpsetpriv(1), login.defs(5), shells(5), pam(8), runuser(8) Linux Kernel Archive
- -c, --command=command
- Pass command to the shell with the -c option.
- -f, --fast
- Pass -f to the shell, which may or may not be useful, depending on the shell.
- -g, --group=group
- Specify the primary group. This option is available to the root user only.
- -G, --supp-group=group
- Specify a supplemental group. This option is available to the root user only. The first specified supplementary group is also used as a primary group if the option --group is unspecified.
- -, -l, --login
- Start the shell as a login shell with an environment similar to a real login:
- clears all the environment variables except TERM
- initializes the environment variables HOME, SHELL, USER, LOGNAME, and PATH
- changes to the target user's home directory
- sets argv of the shell to '-' in order to make the shell a login shell
- -m, -p, --preserve-environment
- Preserve the entire environment, i.e. it does not set HOME, SHELL, USER nor LOGNAME. This option is ignored if the option --login is specified.
- -s, --shell=shell
- Run the specified shell instead of the default. The shell to run is selected according to the following rules, in order:
- the shell specified with --shell
- the shell specified in the environment variable SHELL, if the --preserve-environment option is used
- the shell listed in the passwd entry of the target user
- If the target user has a restricted shell (i.e. not listed in /etc/shells), the --shell option and the SHELL environment variables are ignored unless the calling user is root.
- Same as -c but do not create a new session. (Discouraged.)
- -V, --version
- Display version information and exit.
- -h, --help
- Display help text and exit.
Delay in seconds in case of an authentication failure. The number must be a non-negative integer.ENV_PATH (string)
Defines the PATH environment variable for a regular user. The default value is /usr/local/bin:/bin:/usr/bin.ENV_ROOTPATH (string)
Defines the PATH environment variable for root. The default value is /usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin.ALWAYS_SET_PATH (boolean)
If set to yes and --login and --preserve-environment were not specified su initializes PATH.
- Generic error before executing the requested command
- The requested command could not be executed
- The requested command was not found
- default PAM configuration file
- PAM configuration file if --login is specified
- command specific logindef config file
- global logindef config file