Menu
Home
People
Places
Arts
History
Plants & Animals
Science
Life & Culture
Technology
Reference.org
su (Unix)
open-in-new
<h2 id="history">History</h2> <p>The command su, including the <a href="/facts/Unix_permissions/DHq5SwI4">Unix permissions</a> system and the <a href="/facts/Setuid/F2TnVj73">setuid</a> system call, was part of <a href="/facts/Version_1_Unix/5oWmUdwo">Version 1 Unix</a>. Encrypted passwords appeared in <a href="/facts/Version_3_Unix/5oWmUdwo">Version 3</a>.<a class="footnote-ref" id="fnref:5" href="#fn:5"><sup>5</sup></a> The command is available as a separate package for <a href="/facts/Microsoft_Windows/bwhAhuSL">Microsoft Windows</a> as part of the <a href="/facts/UnxUtils/CsUBGmUM">UnxUtils</a> collection of <a href="/facts/Native_(computing)/yNez4jAK">native</a> <a href="/facts/Windows_API/RRw4RtTu">Win32</a> <a href="/facts/Porting/7s6tFs8B">ports</a> of common GNU Unix-like utilities.<a class="footnote-ref" id="fnref:6" href="#fn:6"><sup>6</sup></a> </p><p>The su command was removed from <a href="/facts/GNU_Core_Utilities/Q9cop5U5">GNU coreutils</a> as of release 8.18 (2012-08-12)<a class="footnote-ref" id="fnref:7" href="#fn:7"><sup>7</sup></a> and is currently included in the <a href="/facts/Util-linux/vPHnV2Iy">util-linux</a> package. </p> <h2 id="usage">Usage</h2> <p>When run from the command line, su asks for the target user's password, and if authenticated, grants the operator access to that account and the files and directories that account is permitted to access. </p> john@localhost:~$ su jane Password: jane@localhost:/home/john$ exit logout john@localhost:~$ <p>When used with a <a href="/facts/Hyphen/2qtCxIGv">hyphen</a> (su -) it can be used to start a login shell. In this mode users can assume the user environment of the target user. </p> john@localhost:~$ su - jane Password: jane@localhost:~$ <p>The command <a href="/facts/Sudo/7jhmGdqg">sudo</a> is related, and executes a command as another user but observes a set of constraints about which users can execute which commands as which other users (generally in a configuration file named /etc/sudoers, best editable by the command <a href="/facts/Visudo/7jhmGdqg">visudo</a>). Unlike su, sudo authenticates users against their own password rather than that of the target user (to allow the delegation of specific commands to specific users on specific hosts without sharing passwords among them and while mitigating the risk of any unattended terminals). </p><p>Some <a href="/facts/Unix-like/YAKrAxzd">Unix-like</a> systems implement the user group <i><a href="/facts/Wheel_(computing)/lBM6qSXM">wheel</a></i>, and only allow members to become root with su.<a class="footnote-ref" id="fnref:8" href="#fn:8"><sup>8</sup></a> This may or may not mitigate these security concerns, since an intruder might first simply break into one of those accounts. <a href="/facts/GNU/HlAKKBdt">GNU</a> su, however, does not support the group <i>wheel</i> for philosophical reasons. <a href="/facts/Richard_Stallman/hhoPN0Mw">Richard Stallman</a> argues that because the group would prevent users from utilizing root passwords leaked to them, the group would allow existing admins to ride roughshod over ordinary users.<a class="footnote-ref" id="fnref:9" href="#fn:9"><sup>9</sup></a> </p> <h2 id="see-also">See also</h2> <ul><li><a href="/facts/Unix_security/kJJaH3qE">Unix security</a></li> <li><a href="/facts/List_of_Unix_commands/EEuIsUx9">List of Unix commands</a></li> <li><a href="/facts/Comparison_of_privilege_authorization_features/bJHqXylq">Comparison of privilege authorization features</a></li></ul> <h2 id="further-reading">Further reading</h2> <ul><li><a href="https://blog.djmnet.org/2013/01/14/from-novice-to-master-and-back-again/">"From Novice to Master, and Back Again"</a>. <i>D-Mac's Stuff</i>. 2013-01-14. Retrieved 2022-08-10.</li></ul> <h2 id="external-links">External links</h2> <ul><li><a href="https://web.archive.org/web/20131210155635/http://www.gnu.org/software/coreutils/manual/html_node/su-invocation.html">su</a> – manual pages from <a href="/facts/GNU/HlAKKBdt">GNU</a> <a href="/facts/Coreutils/Q9cop5U5">coreutils</a>.</li> <li><a href="https://linux.die.net/man/1/su">su(1)</a> – <a href="/facts/Linux/9FvCKSTq">Linux</a> User Commands <a href="/facts/Man_page/S2yYjy0J">Manual</a></li> <li><a href="https://www.freebsd.org/cgi/man.cgi?query=su&sektion=1">su(1)</a> – <a href="/facts/FreeBSD/RKsFTm7F">FreeBSD</a> General Commands <a href="/facts/Man_page/S2yYjy0J">Manual</a></li> <li><a href="https://docs.oracle.com/cd/E88353_01/html/E72487/su-8.html">su(8)</a> – <a href="/facts/Solaris_(operating_system)/KPfT98EJ">Solaris 11.4</a> System Administration Commands Reference <a href="/facts/Man_page/S2yYjy0J">Manual</a></li> <li><a href="http://www.linfo.org/su.html">The su command</a> – by The Linux Information Project (LINFO) (<a href="https://web.archive.org/web/20211020082958/http://www.linfo.org/su.html">Archived</a> 20 October 2021 at the <a href="/facts/Wayback_Machine/nmQ3a6JC">Wayback Machine</a>)</li></ul> <h2 id="references">References</h2> <ol> <li id="fn:1"><p>"su(1) - Linux manual page". April 2, 2021. su - run a command with substitute user and group ID <a href="https://man7.org/linux/man-pages/man1/su.1.html" target="_blank">https://man7.org/linux/man-pages/man1/su.1.html</a> <a href="#fnref:1" class="footnote-back-ref">↩</a></p></li> <li id="fn:2"><p>"Unix Programmer's Manual, Seventh Edition, Volume 1" (PDF). January 1, 1979. p. 174. Archived (PDF) from the original on Jan 20, 2022. su - substitute user id temporarily <a href="https://s3.amazonaws.com/plan9-bell-labs/7thEdMan/v7vol1.pdf" target="_blank">https://s3.amazonaws.com/plan9-bell-labs/7thEdMan/v7vol1.pdf</a> <a href="#fnref:2" class="footnote-back-ref">↩</a></p></li> <li id="fn:3"><p>"Unix Programmer's Manual" (PDF). November 3, 1971. p. 17. Archived (PDF) from the original on March 17, 2022. su -- become privileged user... su allows one to become the super-user. <a href="https://www.bell-labs.com/usr/dmr/www/man13.pdf" target="_blank">https://www.bell-labs.com/usr/dmr/www/man13.pdf</a> <a href="#fnref:3" class="footnote-back-ref">↩</a></p></li> <li id="fn:4"><p>"Unix Programmer's Manual - Table of Contents" (PDF). November 3, 1971. Archived (PDF) from the original on March 17, 2022. su: become super-user <a href="https://www.bell-labs.com/usr/dmr/www/pdfs/manindex.pdf" target="_blank">https://www.bell-labs.com/usr/dmr/www/pdfs/manindex.pdf</a> <a href="#fnref:4" class="footnote-back-ref">↩</a></p></li> <li id="fn:5"><p>McIlroy, M. D. (1987). A Research Unix reader: offticles annotated excerpts from the Programmer's Manual, 1971–1986 (PDF) (Technical report). CSTR. Bell Labs. 139. <a href="/wiki/Doug_McIlroy" target="_blank">/wiki/Doug_McIlroy</a> <a href="#fnref:5" class="footnote-back-ref">↩</a></p></li> <li id="fn:6"><p>"Native Win32 ports of some GNU utilities". unxutils.sourceforge.net. <a href="http://unxutils.sourceforge.net/" target="_blank">http://unxutils.sourceforge.net/</a> <a href="#fnref:6" class="footnote-back-ref">↩</a></p></li> <li id="fn:7"><p>"NEWS". GitHub. 17 September 2022. <a href="https://github.com/coreutils/coreutils/blob/master/NEWS" target="_blank">https://github.com/coreutils/coreutils/blob/master/NEWS</a> <a href="#fnref:7" class="footnote-back-ref">↩</a></p></li> <li id="fn:8"><p>Levi, Bozidar (2002). UNIX Administration: A Comprehensive Sourcebook for Effective Systems and Network Management. CRC Press. pp. 207. ISBN 0-8493-1351-1. <a href="0-8493-1351-1" target="_blank">0-8493-1351-1</a> <a href="#fnref:8" class="footnote-back-ref">↩</a></p></li> <li id="fn:9"><p>"Why GNU su does not support the 'wheel' group". Archived from the original on June 21, 2021. Retrieved May 30, 2022. <a href="https://ftp.gnu.org/old-gnu/Manuals/coreutils-4.5.4/html_node/coreutils_149.html" target="_blank">https://ftp.gnu.org/old-gnu/Manuals/coreutils-4.5.4/html_node/coreutils_149.html</a> <a href="#fnref:9" class="footnote-back-ref">↩</a></p></li> </ol>