about summary refs log tree commit diff
path: root/Doc
diff options
context:
space:
mode:
authorOliver Kiddle <opk@zsh.org>2014-11-09 17:40:22 +0100
committerOliver Kiddle <opk@zsh.org>2014-11-09 17:53:25 +0100
commit31df6c4d32da203f9eaf96a6b3a28918a7a48978 (patch)
treec6509e37b7a1140c52e974e7c307d85812261ccf /Doc
parentf01188ec2ad14165c8e580826721cbb71c49e2a2 (diff)
downloadzsh-31df6c4d32da203f9eaf96a6b3a28918a7a48978.tar.gz
zsh-31df6c4d32da203f9eaf96a6b3a28918a7a48978.tar.xz
zsh-31df6c4d32da203f9eaf96a6b3a28918a7a48978.zip
33643: elaborate documentation of the PRIVILEGED option
Diffstat (limited to 'Doc')
-rw-r--r--Doc/Zsh/options.yo20
1 files changed, 16 insertions, 4 deletions
diff --git a/Doc/Zsh/options.yo b/Doc/Zsh/options.yo
index 452b258b4..b9f78bfa3 100644
--- a/Doc/Zsh/options.yo
+++ b/Doc/Zsh/options.yo
@@ -2195,10 +2195,22 @@ pindex(NOPRIVILEGED)
 cindex(privileged mode)
 cindex(mode, privileged)
 item(tt(PRIVILEGED) (tt(-p), ksh: tt(-p)))(
-Turn on privileged mode. This is enabled automatically on startup if the
-effective user (group) ID is not equal to the real user (group) ID.  Turning
-this option off causes the effective user and group IDs to be set to the
-real user and group IDs. This option disables sourcing user startup files.
+Turn on privileged mode. Typically this is used when script is to be run
+with elevated privileges. This should be done as follows directly with
+the tt(-p) option to zsh so that it takes effect during startup.
+
+example(#!/bin/zsh -p)
+
+The option is enabled automatically on startup if the effective user
+(group) ID is not equal to the real user (group) ID. In this case,
+turning the option off causes the effective user and group IDs to be set
+to the real user and group IDs. Be aware that if that fails the shell may
+be running with different IDs than was intended so a script should check
+for failure and act accordingly, for example:
+
+example(unsetopt privileged || exit)
+
+The tt(PRIVILEGED) option disables sourcing user startup files.
 If zsh is invoked as `tt(sh)' or `tt(ksh)' with this option set,
 tt(/etc/suid_profile) is sourced (after tt(/etc/profile) on interactive
 shells). Sourcing tt(~/.profile) is disabled and the contents of the