<!DOCTYPE refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN">

<!--
	``MakeMan'' SGML Template for a man page
	For more Information, please see http://mama.sourceforge.net

-->

<refentry id="xsu">
	<refmeta>
		<refentrytitle>XSU</refentrytitle>
		<manvolnum>8</manvolnum>
		<refmiscinfo class="date">September 1st, 2001</refmiscinfo>
		<refmiscinfo class="source">xsu</refmiscinfo>
		<refmiscinfo class="title">GNOME User's Manual</refmiscinfo>
	</refmeta>

	<refnamediv>
		<refname>xsu</refname>
		<refpurpose>su for GNOME</refpurpose>
	</refnamediv>

	<refsynopsisdiv>
		<cmdsynopsis>
			<command>xsu</command>
				<arg choice="opt" rep="repeat">OPTION</arg>
		</cmdsynopsis>
	</refsynopsisdiv>

	<refsect1>
		<title>DESCRIPTION</title>
		<para>
			<command>xsu</command>, is a tool to replace the `su -c command`
			in Gnome. When the user executes <command>xsu</command>, he will be prompted for a
			command, a username and a password.  If the username and password
			are correct xsu will execute the command as the entered user. So
			if the username was root, then the command will be executed as
			root.
		</para>
	</refsect1>

	<refsect1>
		<title>SECURITY</title>
		<para>
			The security of all older <command>xsu</command> versions was very
			bad. With <command>xsu</command> version 0.1.0 I introduced the
			use of a pipe to a secured non-Gnome SUID application.  Because
			<command>xsu</command> is not as secure as the normal su command
			(for example the one from GNU sh-utils), I still don't recommend
			using <command>xsu</command> on computers where security is an
			important issue. It's way easier to do bruteforce password attacks
			on suid<command>xsu</command> then on GNU's su from the sh-utils
			package. You could consider using the sudo program on these
			computers.
		</para>
	</refsect1>
	
	<refsect1> 
		<title>OPTIONS</title>
		<para> 
			This program follows the usual GNU command line syntax, with long
			options starting with two dashes (`--'). A summary of the options
			supported by <command>xsu</command> is included below.  
		</para>
		<para>
			<variablelist>
				<varlistentry>
					<term>-c, --command <replaceable>COMMAND</replaceable></term>
					<listitem>
						<para>Set the command to be executed</para>
					</listitem>
				</varlistentry>
				<varlistentry>
					<term>-m, --message <replaceable>MESSAGE</replaceable></term>
					<listitem>
						<para>
							Set the message to be displayed; you can use the
							character ^ in your message if you want to use a new
							line, and the character ~ if you want to use a
							tabulation.  If no message is set, then the default
							message will be used.
						</para>
					</listitem>
				</varlistentry>
				<varlistentry>
					<term>-u, --username <replaceable>USERNAME</replaceable></term>
					<listitem>
						<para>Set the username to execute the command as</para>
					</listitem>
				</varlistentry>
			</variablelist>
		</para>
	</refsect1>

	<refsect1>
		<title>EXAMPLES</title>
		<para>
			<command>xsu -c</command> "<emphasis>gmenu</emphasis>"
			<command>-u</command> "<emphasis>root</emphasis>"
			<command>-m</command> "<emphasis>To start the Menu Editor^you have
			to enter^the root password^here.</emphasis>" 
		</para>
	</refsect1>

	<refsect1>
		<title>BUGS</title>
		<para>
			Please report bugs to the Author.
		</para>
	</refsect1>

	<refsect1>
		<title>SEE ALSO</title>
		<para>
			<command>su(1), sudo(1), suidxsu(1)</command>
		</para>
		<para>
			<ulink url="http://xsu.freax.eu.org/">XSU Homepage</ulink>
		</para>
	</refsect1>

	<refsect1>
		<title>AUTHOR</title>
		<para>
			Philip Van Hoof <email>freax@pandora.be</email>
		</para>
		<para>
			This man-page was written by Jan Schaumann
			<email>jschauma@netmeister.org</email> as part of "<ulink
			url="http://www.netmeister.org/misc/m2p2/index.html">The Missing
			Man Pages Project</ulink>".
		</para>
	</refsect1>
</refentry>
