Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

In su(1), fix option ordering and clarify that the login class specified
must be defined in login.conf.

MFC after: 1 month

Attempt to clear up some confusion in the following example, by stating
the '-c' argument is passed to the shell, not to su(1), which would
indicate the login class.

'su -m <user> -c <command>'

Submitted by: Warren Block <wblock@wonkity.com> (followup to 157078)
MFC after: 5 days

Bump date from previous commit. :(

MFC after: 5 days

Document that when running 'su -m <user> -c <command>', <command> is run
within a shell as <user>.

PR: 157078
Submitted by: Warren Block <wblock@wonkity.com>
MFC after: 5 days

Remove the advertising clause from UCB copyrighted files in usr.bin. This
is in accordance with the information provided at
ftp://ftp.cs.berkeley.edu/pub/4bsd/README.Impt.License.Change

Also add $FreeBSD$ to a few files to keep svn happy.

Discussed with: imp, rwatson

- add the -m option to the example commands because they would fail w/o it
as the ``man'' user does not have a valid shell by default.

PR: docs/121713
Approved by: trhodes
MFC after: 3 days

Stop mentioning /usr/X11R6.

Approved by: re (hrs)

Markup fixes.

Remove references to the pam(8) manual page. It does not exist.

Requested by: novel
Discussed with: brueffer, simon

- Mention that users need to be in the wheel group to `su - root' by default, and how to change it.

PR: docs/70616
Submitted by: Jilles Tjoelker <jilles at stack dot nl>
Reviewed by: ru@
Approved by: ceri@
MFC after: 3 days

Sort sections.

Bump document date for last commit.

Noticed by: ru

PAM configuration is now in /etc/pam.d/su.

Submitted by: Jilles Tjoelker <jilles@stack.nl> (original version)
PR: docs/70616 (part of)
MFC after: 1 week

Deal with double whitespace.

Mechanically kill hard sentence breaks.

Bumped the document date.
Fixed the grammar nit.

- Clarification to how command line arguments are processed.

PR: docs/55613
Submitted by: gshapiro@freebsd.org
Approved by: blackend (mentor)

typo

mdoc(7) police: markup polishing.

Approved by: re

Add a new '-s' option to su(1): if the flag is present, attempt to
also set the user's MAC label as part of the user credential setup
by setting setusercontext(3)'s SETMAC flag. By default, change only
traditional process properties.

Approved by: re
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories

Use `The .Nm utility'

Fix a few typos.
as a user ID -> has a user ID
command constitutes of -> command consists of

PR: misc/36523
Submitted by: Chris Pepper <pepper@mail.rockefeller.edu>
MFC after: 3 days

mdoc(7) police: join split punctuation to macro calls.

Remove whitespace at EOL.

Deconvolute the authentication mess, and hand total responsiblity
for authentication to PAM. This meens that WHEELSU-type logic can
now be effected in the pam.conf "su" configuration stack. While here,
clean up the mess that the code had assumed over years of hacking by
folks using different styles. ANSIfy.

There is more policy in here that can be handed over to PAM. This will
be revisited.

Dike out the Kerberos(IV) support on the grounds that better kerberos
support can be already obtained via PAM.

Add full PAM support for account management and sessions.

The PAM_FAIL_CHECK and PAM_END macros in su.c came from the util-linux
package's PAM patches to the BSD login.c

Submitted by: "David J. MacKenzie" <djm@web.us.uu.net>

mdoc(7) police: use the new features of the Nm macro.

Document the ``-'' option and minor re-wording in EXAMPLES

Remove single-space hard sentence breaks. These degrade the quality
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.

$Id$ -> $FreeBSD$

Add JKH's auth.conf parser to turn on/off Kerberos in userland

Reword to remove confusion between su(1)'s "-c" option and that of the shell
being invoked. Add example that clarifies usage of "-c".

PR: 6859

Allow a user in group 0 to su(1) to root if their primary
group is 0 in /etc/passwd even if they aren't listed
as a member in /etc/group. This is more inline with
what the group manpage says.

PR: 6696
Submitted by: Max Euston <meuston@jmrodgers.com>

Add -c option that allows root to specify a login_class.

PR: docs/4383
su manpage ambiguous regarding command prompt

Submitted by: sheldonh@iafrica.com

fix a few spelling changes

Submitted by: Josh Gilliam

Closes PR's: 4429, 4431-4438

PS: He has agreed to submit all contrib fixes back to the original author.

Add usage().

When group wheel is empty, allow everyone to su to root. This has normally
no conseqeunces as we ship with a non-empty wheel.

Closes PR/1882
Submitted by: Arne Henrik Juul <arnej@frida.imf.unit.no>

Revert $FreeBSD$ to $Id$

Sort cross references.

Make the long-awaited change from $Id$ to $FreeBSD$

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore. This update would have been
insane otherwise.

Document effect of login class capabilities.

[HISTORY] command appeared in Version 1 AT&T UNIX
Obtained from: A Quarter Century of UNIX, Peter H. Salus, page 41

Bring Barry Morris' changes from FreeBSD 1.1.5.1 back: pass arguments
to the target login's shell. This allows for "su -c".

Do it right this time and also explain this behaviour in the man
page. :)

Obtained from: bsm's work in FreeBSD 1.1.5.1

This commit was generated by cvs2svn to compensate for changes in r1590,
which included commits to RCS files with non-trunk default branches.

BSD 4.4 Lite Usr.bin Sources