From: Christoph Anton Mitterer Date: Mon, 25 Nov 2024 01:41:13 +0000 (+0100) Subject: man pages: use `user` rather than `username` X-Git-Tag: v2.42-start~135^2~1 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=c8506371c644dc057d9f933cf2b0b48799a720bc;p=thirdparty%2Futil-linux.git man pages: use `user` rather than `username` This are also the terms used in the usage outputs of the programs and the rest of the man pages. Signed-off-by: Christoph Anton Mitterer --- diff --git a/login-utils/runuser.1.adoc b/login-utils/runuser.1.adoc index aea95f743..b128c1984 100644 --- a/login-utils/runuser.1.adoc +++ b/login-utils/runuser.1.adoc @@ -56,7 +56,7 @@ Start the shell as a login shell with an environment similar to a real login: Preserve the entire environment, i.e., do not set *HOME*, *SHELL*, *USER* or *LOGNAME*. The option is ignored if the option *--login* is specified. *-P*, *--pty*:: -Create a pseudo-terminal for the session. The independent terminal provides better security as the user does not share a terminal with the original session. This can be used to avoid TIOCSTI ioctl terminal injection and other security attacks against terminal file descriptors. The entire session can also be moved to the background (e.g., *runuser --pty* *-u* _username_ *--* _command_ *&*). If the pseudo-terminal is enabled, then *runuser* works as a proxy between the sessions (sync stdin and stdout). +Create a pseudo-terminal for the session. The independent terminal provides better security as the user does not share a terminal with the original session. This can be used to avoid TIOCSTI ioctl terminal injection and other security attacks against terminal file descriptors. The entire session can also be moved to the background (e.g., *runuser --pty* *-u* _user_ *--* _command_ *&*). If the pseudo-terminal is enabled, then *runuser* works as a proxy between the sessions (sync stdin and stdout). + This feature is mostly designed for interactive sessions. If the standard input is not a terminal, but for example a pipe (e.g., *echo "date" | runuser --pty -u* _user_), then the *ECHO* flag for the pseudo-terminal is disabled to avoid messy output. diff --git a/login-utils/su.1.adoc b/login-utils/su.1.adoc index 2db2e04c5..33f45833f 100644 --- a/login-utils/su.1.adoc +++ b/login-utils/su.1.adoc @@ -64,7 +64,7 @@ PAM) from this point of view. You need to use tools like *systemd-run* or Preserve the entire environment, i.e., do not set *HOME*, *SHELL*, *USER* or *LOGNAME*. This option is ignored if the option *--login* is specified. *-P*, *--pty*:: -Create a pseudo-terminal for the session. The independent terminal provides better security as the user does not share a terminal with the original session. This can be used to avoid *TIOCSTI* ioctl terminal injection and other security attacks against terminal file descriptors. The entire session can also be moved to the background (e.g., *su --pty* **-** __username__ *-c* _application_ *&*). If the pseudo-terminal is enabled, then *su* works as a proxy between the sessions (sync stdin and stdout). +Create a pseudo-terminal for the session. The independent terminal provides better security as the user does not share a terminal with the original session. This can be used to avoid *TIOCSTI* ioctl terminal injection and other security attacks against terminal file descriptors. The entire session can also be moved to the background (e.g., *su --pty* **-** __user__ *-c* _application_ *&*). If the pseudo-terminal is enabled, then *su* works as a proxy between the sessions (sync stdin and stdout). + This feature is mostly designed for interactive sessions. If the standard input is not a terminal, but for example a pipe (e.g., *echo "date" | su --pty*), then the *ECHO* flag for the pseudo-terminal is disabled to avoid messy output.