setgid(2) [hpux man page]

setuid(2)							System Calls Manual							 setuid(2)

NAME

       setuid(), setgid() - set user and group IDs

SYNOPSIS

DESCRIPTION

       sets  the  real-user-ID	(ruid), effective-user-ID (euid), and/or saved-user-ID (suid) of the calling process.  If the Security Containment
       product is installed, these interfaces treat a process observing as a privileged process.  Otherwise, only processes with an euid  of  zero
       are treated as privileged processes.  See privileges(5) for more information on Security Containment and fine-grained privileges.

       The following conditions govern setuid's behavior:

	      o  If the process is privileged, sets the ruid, euid, and suid to uid.

	      o  If  the  process is not privileged and the argument uid is equal to the ruid or the suid, sets the euid to uid; the ruid and suid
		 remain unchanged.  (If a set-user-ID program is not running as superuser, it can change its euid to  match  its  ruid	and  reset
		 itself to the previous euid value.)

	      o  If the process is not privileged, the argument uid is equal to the euid, and the calling process has the privilege, sets the ruid
		 to uid; the euid and suid remain unchanged.

       sets the real-group-ID (rgid), effective-group-ID (egid), and/or saved-group-ID (sgid) of the calling process.	The  following	conditions
       govern behavior:

	      o  If the process is privileged, sets the rgid and egid to gid.

	      o  If  the  process is not privileged and the argument gid is equal to the rgid or the sgid, sets the egid to gid; the rgid and sgid
		 remain unchanged.

	      o  If the process is not privileged, the argument gid is equal to the egid, and the calling process has the privilege, sets the rgid
		 to gid; the egid and sgid remain unchanged.

   Security Restrictions
       Some  or  all of the actions associated with this system call require the privilege.  Processes owned by the superuser have this privilege.
       Processes owned by other users may have this privilege, depending on system configuration.

       See privileges(5) for more information about privileged access on systems that support fine-grained privileges.

RETURN VALUE

       Upon successful completion, and return 0; otherwise, they return -1 and set to indicate the error.

ERRORS

       and fail and return -1 if any of the following conditions are encountered:

	      None of the conditions above are met.

	      uid	     (gid) is not a valid user (group) ID.

WARNINGS

       It is recommended that the capability be avoided, as it is provided for backward compatibility.	This feature may be  modified  or  dropped
       from future HP-UX releases.  When changing the real user ID and real group ID, use of and (see setresuid(2)) is recommended instead.

AUTHOR

       was developed by AT&T, the University of California, Berkeley, and HP.

       was developed by AT&T.

SEE ALSO

       exec(2), getuid(2), setresuid(2), privileges(5).

STANDARDS CONFORMANCE

																	 setuid(2)

setuid(2)							   System Calls 							 setuid(2)

NAME

       setuid, setegid, seteuid, setgid - set user and group IDs

SYNOPSIS

       #include <sys/types.h>
       #include <unistd.h>

       int setuid(uid_t uid);

       int setgid(gid_t gid);

       int seteuid(uid_t euid);

       int setegid(gid_t egid);

DESCRIPTION

       The  setuid()  function	sets the real user ID, effective user ID, and saved user ID of the calling process. The setgid() function sets the
       real group ID, effective group ID, and saved group ID of the calling process. The setegid() and seteuid() functions set the effective group
       and user IDs respectively for the calling process. See Intro(2) for more information on real, effective, and saved user and group IDs.

       At  login time, the real user ID, effective user ID, and saved user ID of the login process are set to the login ID of the user responsible
       for the creation of the process. The same is true for the real, effective, and saved group IDs; they are set to the group ID  of  the  user
       responsible for the creation of the process.

       When  a process calls one of the exec(2) family of functions to execute a file (program), the user and/or group identifiers associated with
       the process can change. If the file executed is a set-user-ID file, the effective and saved user IDs of the process are set to the owner of
       the  file  executed.  If the file executed is a set-group-ID file, the effective and saved group IDs of the process are set to the group of
       the file executed. If the file executed is not a set-user-ID or set-group-ID file, the effective user ID, saved user  ID,  effective  group
       ID, and saved group ID are not changed.

       If  the	{PRIV_PROC_SETID}  privilege is asserted in the effective set of the process calling setuid(), the real, effective, and saved user
       IDs are set to the uid argument.  If the uid argument is 0 and none of the saved, effective or  real  UID  is  0,  additional  restrictions
       apply. See privileges(5).

       If  the	{PRIV_PROC_SETID}  privilege  is not asserted in the effective set, but uid is either the real user ID or the saved user ID of the
       calling process, the effective user ID is set to uid.

       If the {PRIV_PROC_SETID} privilege is asserted in the effective set of the process calling setgid(), the real, effective, and  saved  group
       IDs are set to the gid argument.

       If  the	{PRIV_PROC_SETID} privilege is not asserted in the effective set, but gid is either the real group ID or the saved group ID of the
       calling process, the effective group ID is set to gid.

RETURN VALUES

       Upon successful completion, 0 is returned. Otherwise, -1 is returned and errno is set to indicate the error.

ERRORS

       The setuid() and setgid() functions will fail if:

       EINVAL	 The value of uid or gid is out of range.

       EPERM	 For setuid() and seteuid(), the {PRIV_PROC_SETID} privilege is not asserted in the effective set of the calling process  and  the
		 uid  argument does not match either the real or saved user IDs, or an attempt is made to change to UID 0 and none of the existing
		 UIDs is 0, in which case additional privileges are required.

		 For setgid() and setegid(), the {PRIV_PROC_SETID} privilege is not asserted in the effective set and the gid  argument  does  not
		 match either the real or saved group IDs.

ATTRIBUTES

       See attributes(5) for descriptions of the following attributes:

       +-----------------------------+-----------------------------+
       |      ATTRIBUTE TYPE	     |	    ATTRIBUTE VALUE	   |
       +-----------------------------+-----------------------------+
       |Interface Stability	     |Standard			   |
       +-----------------------------+-----------------------------+
       |MT-Level		     |Async-Signal-Safe 	   |
       +-----------------------------+-----------------------------+

SEE ALSO

       Intro(2), exec(2), getgroups(2), getuid(2), stat.h(3HEAD), attributes(5), privileges(5), standards(5)

SunOS 5.11							    20 Jan 2003 							 setuid(2)