Reference Guide › Utilities › senone Utility—Execute a Command as an Unauthorized User

senone Utility—Execute a Command as an Unauthorized User

Valid on UNIX

The senone utility executes a command issued by a highly authorized user as an unauthorized user process.

Note: Only highly authorized users who are testing untrusted programs should use this utility.

When you invoke the senone utility, it deletes the process credentials from the authorization daemon. senone then executes a shell with the credentials of a user who is not defined to CA Access Control. From this point on, any program invoked from within this shell is executed with the credentials of the non‑CA Access Control user. Because senone does not change the invoker's user ID, the user's UNIX privileges remain unchanged.

Important! We recommend that users who are logged in as root not run untrusted programs. Even when running untrusted programs with senone, unexpected problems can occur.

If you invoke senone without specifying a command, it executes the user's shell as defined in /etc/passwd.

This command has the following format:

senone [command]

‑h

Displays the help for this utility.

command

Specifies the command you want senone to execute as an unauthorized user.

More information:

sesu Utility—Substitute User

sewhoami Utility—Display Your CA Access Control User name and Security Credentials on UNIX