z/OS V1R9.0 UNIX System Services Command ... - Christian Grothoff

Options
Examples
Usage notes
To restore the previous session, enter exit or press (where EscChar
is normally the cent sign). If you use rlogin or telnet to enter the shell, you hold
down the Ctrl key while you press D. This action ends the child shell initiated by the
su command and returns you to the previous shell, user ID, and environment. See
z/OS UNIX System Services User’s Guide for more information about exiting the
shell environment.
– Start the new shell as a login shell. Set the shell variables SHELL, HOME,
and LOGNAME according to the new user’s profile, and prepend a ’–’ to the
shell name to indicate that the shell should read its login profiles.
–s Does not prompt for password. If a user ID is specified, you must have read
access to the SURROGAT class profile, BPX.SRV.uuuuuuuu (where
uuuuuuuu is the MVS userid associated with the target UID).
To switch to admin user ID, but maintain the current user’s shell environment:
su admin
To authorize a user to switch to another user without entering a password, grant
them RACF SURROGAT authority:
RDEFINE SURROGAT BPX.SRV.ADMIN UACC(NONE)
PERMIT BPX.SRV.ADMIN CLASS(SURROGAT) ID(FRED) ACCESS(READ)
SETROPTS RACLIST(SURROGAT) REFRESH
Then, from Fred, issue:
su -s admin
To start a child shell with the login environment of the admin user ID:
su - admin
To run the /usr/lib/backupall script under the admin user ID (and return to the parent
shell environment when the script completes):
su admin /usr/lib/backupall
To run a remove shell command under the admin user ID (and return to the parent
shell environment when the command completes):
su admin -c "rm -rf /tmp/"
1. The new shell inherits the standard file descriptors from the su command, so
commands can be piped to the stdin of the new shell and run under the new
user.
2. If the OMVS NOECHO option is in effect, your password will be displayed.
3. Because su starts a new interactive shell, it should not be used from a batch
interface such as BPXBATCH, unless you provide the commands to be
executed under superuser via stdin to the su command.
4. After issuing su -s in the shell to switch to another user, the new user will not
have the authority to issue any commands that require an implicit open() of a
tty. This restriction includes calls which invoke the Binder (such as cp -X and
c89) as well as explicit attempts at opening a file descriptor (such as cat
/dev/fd2). An ICH408I message is written to the console to alert the user of the
access violation.
su
Chapter 2. Shell command descriptions 609