newgrp(1) [freebsd man page]

NEWGRP(1)						    BSD General Commands Manual 						 NEWGRP(1)

NAME

     newgrp -- change to a new group

SYNOPSIS

     newgrp [-l] [group]

DESCRIPTION

     The newgrp utility creates a new shell execution environment with modified real and effective group IDs.

     The options are as follows:

     -l      Simulate a full login.  The environment and umask are set to what would be expected if the user actually logged in again.

     If the group operand is present, a new shell is started with the specified effective and real group IDs.  The user will be prompted for a
     password if they are not a member of the specified group.

     Otherwise, the real, effective and supplementary group IDs are restored to those from the current user's password database entry.

EXIT STATUS

     The newgrp utility attempts to start the shell regardless of whether group IDs were successfully changed.

     If an error occurs and the shell cannot be started, newgrp exits >0.  Otherwise, the exit status of newgrp is the exit status of the shell.

SEE ALSO

     csh(1), groups(1), login(1), sh(1), su(1), umask(1), group(5), passwd(5), environ(7)

STANDARDS

     The newgrp utility conforms to IEEE Std 1003.1-2001 (``POSIX.1'').

HISTORY

     A newgrp utility appeared in Version 6 AT&T UNIX.

BUGS

     For security reasons, the newgrp utility is normally installed without the setuid bit.  To enable it, run the following command:

	   chmod u+s /usr/bin/newgrp

     Group passwords are inherently insecure as there is no way to stop users obtaining the password hash from the group database.  Their use is
     discouraged.  Instead, users should simply be added to the necessary groups.

BSD
								 February 8, 2013							       BSD

NEWGRP(1)                                                          User Commands                                                         NEWGRP(1)

NAME

       newgrp - log in to a new group

SYNOPSIS

       newgrp [-] [group]

DESCRIPTION

       The newgrp command is used to change the current group ID during a login session. If the optional - flag is given, the user's environment
       will be reinitialized as though the user had logged in, otherwise the current environment, including current working directory, remains
       unchanged.

       newgrp changes the current real group ID to the named group, or to the default group listed in /etc/passwd if no group name is given.
       newgrp also tries to add the group to the user groupset. If not root, the user will be prompted for a password if she does not have a
       password (in /etc/shadow if this user has an entry in the shadowed password file, or in /etc/passwd otherwise) and the group does, or if
       the user is not listed as a member and the group has a password. The user will be denied access if the group password is empty and the user
       is not listed as a member.

       If there is an entry for this group in /etc/gshadow, then the list of members and the password of this group will be taken from this file,
       otherwise, the entry in /etc/group is considered.

CONFIGURATION

       The following configuration variables in /etc/login.defs change the behavior of this tool:

       SYSLOG_SG_ENAB (boolean)
           Enable "syslog" logging of sg activity.

FILES

       /etc/passwd
           User account information.

       /etc/shadow
           Secure user account information.

       /etc/group
           Group account information.

       /etc/gshadow
           Secure group account information.

SEE ALSO

       id(1), login(1), su(1), sg(1), gpasswd(1), group(5), gshadow(5).

shadow-utils 4.5                                                    01/25/2018                                                           NEWGRP(1)