From: Sam Morris <sam@robots.org.uk>
Date: Thu, 8 Mar 2018 15:43:54 +0000 (+0000)
Subject: setpriv: improve description in man page
X-Git-Tag: v2.32~36^2~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=64eca6406f15e6bed607ac4f81e72dbb90be86f7;p=thirdparty%2Futil-linux.git

setpriv: improve description in man page
---

diff --git a/sys-utils/setpriv.1 b/sys-utils/setpriv.1
index f7f3f572ae..8965d8568a 100644
--- a/sys-utils/setpriv.1
+++ b/sys-utils/setpriv.1
@@ -10,11 +10,22 @@ setpriv \- run a program with different Linux privilege settings
 Sets or queries various Linux privilege settings that are inherited across
 .BR execve (2).
 .PP
-The difference between the commands setpriv and su (or runuser) is that setpriv does
-not use open PAM session and does not ask for password.
-It's simple non-set-user-ID wrapper around
-.B execve
-system call.
+In comparison to
+.BR su (1)
+and
+.BR runuser (1),
+.BR setpriv (1)
+neither uses PAM, nor does it prompt for a password.
+It is a simple, non-setuid wrapper around
+.BR execve (2),
+and can be used to drop privileges in the same way as
+.BR setuidgid (8)
+from
+.BR daemontools ,
+.BR chpst (8)
+from
+.BR runit ,
+or similar tools shipped by other service managers.
 .SH OPTION
 .TP
 .B \-\-clear\-groups