Root typically runs "su {user} -c {command}" to execute a command as a nonroot user (e.g. start a daemon at boot). For this to work, {user} must have a valid login shell.
Erni lets you bypass the call to "su," disable {user}'s login shell, (optionally) chroot the command, and attach group memberships at runtime. This means {user} can become a pure placeholder account to own files and run daemons.




No comment yet
Be the first to share your thoughts.