NAME

       sudo - execute a command as another user

SYNOPSIS

       sudo [-u user] [-g group] [-D directory] [-knS] [-i | -s] [<command>]
       sudo -h | -K | -k | -V

DESCRIPTION

       sudo  allows  a  user that is permitted to do so to execute a command as another user (for example root).
       Permissions are specified by a security policy specified in /etc/sudoers (see sudoers(5)).

       Sudo-rs is a safety oriented and memory safe re-implementation of the  original  sudo  implementation  by
       Todd Miller.

       When  a  command is run, a session record is stored for that specific session allowing users to run addi‐
       tional commands without having to re-authenticate.  The timeout for session records can be  specified  in
       the policy.

       Some care is taken to pass signals received by sudo-rs to the child process, even if that process runs in
       its own pseudo terminal.

OPTIONS

       -D directory, --chdir=directory
              Run the command in the specified directory instead of the current working directory.  The security
              policy  may return an error if the user does not have the permission to specify the working direc‐
              tory.

       -g group, --group=group
              Use this group as the primary group instead of using the primary group specified in  the  password
              database for the target user.

       -h, --help
              Show a help message.

       -i, --login
              Run the shell specified by the target user’s password database entry as a login shell.  This means
              that  login-specific  resource files such as .profile, .bash_profile or .login will be read by the
              shell.  If a command is specified, it is passed to the shell using the -c option.

       -K, --remove-timestamp
              Removes every cached session record for the user, regardless of where  the  command  is  executed.
              The  next time sudo-rs is run, authentication will take place if the policy requires it.  No pass‐
              word is required to run this command.

       -k, --reset-timestamp
              When used without a command, invalidates the user’s session record for the current  session.   The
              next time sudo-rs is run, authentication will take place if the policy requires it.

              When used in conjunction with a command or an option that may require a password, this option will
              cause sudo-rs to ignore the user’s session record.  As a result, authentication will take place if
              the  policy requires it.  When used in conjunction with a command no invalidation of existing ses‐
              sion records will take place.

       -n, --non-interactive
              Avoid prompting the user for input of any kind.  If any input is required for the command to  run,
              sudo-rs will display an error message and exit.

       -S, --stdin
              Read from standard input instead of using the terminal device.

       -s, --shell
              Run  the  shell specified by the SHELL environment variable.  If no shell was specified, the shell
              from the user’s password database entry will be used instead.  If a command is  specified,  it  is
              passed to the shell using the -c option.

       -u user, --user=user
              Run the command as another user than the default (root).

       -V, --version
              Display the current version of sudo-rs.

       -v, --validate
              Update the session record for the current session, authenticating the user if necessary.

       --     Indicates the end of the sudo-rs options and start of the command.

SEE ALSO

       su(1), sudoers(5), visudo(8)

                                                                                                              ()