subuseradd − create a sub-user |
subuseradd username |
Creates a sub-user of the current user, adding an entry to /etc/subusers that notes that the calling user is the “parent” of the created user. This can be used to isolate the caller from a potentially malicious program. The user can then use subusersu or subusersudo to perform actions as the sub-user. For an overview of how the subuser tools interact and how they keep track of what users “belong” to whom, see subusers(7). |
username |
the name of the user to create, will be appended to the current user name plus a hopefully unique separator. |
/etc/subusers |
the file containing the ancestry relationships between users. |
Each distribution is slightly different, and might restrict the length of usernames unnecessarily. Because of this, you might not be able to create as many levels of nesting as you want to. A workaround is to change #define USE_FULLY_QUALIFIED , to cause the commandline argument to be used as the new username, without prepending the calling username. This can cause collisions on multi-user systems, e.g. when two users each want to create a user named “email”. |
Phil Snowberger (psnowber (at) cse.nd.edu) |
subuserdel(1) subuserchown(1) subusersu(1) subusersudo(1) subusers(7) |