SuperScript::Software::ucspi-ipc

The ipcexec program


Interface

  ipcexec cdb
where cdb is a set of rules compiled by ipcexecrules.

ipcexec reads a user ID USERID and a program prog from file descriptor 0, and reads the remote user ID and group ID from the environment variables IPCREMOTEEUID and IPCREMOTEEGID. If the rules in cdb permit the remote user to execute prog as USERID, then ipcexec changes its effective user and group ID to match USERID, and executes prog.

By default, ipcexec redirects standard error to standard output before executing prog. If the $IPCERROUT environment variable is set to 0, then ipcexec does not redirect standard error before executing prog.

If the rules in cdb deny execution of the request, then ipcexec silently exits 100.

After processing the matching rule from cdb and before executing the request, ipcexec checks the following environment variables: