Hi, I did some changes to the su(1): - add --group= option to specify the primary group - add --supp-group= option to specify a supplemental group the both options are based on Fedora runuser(1) patch and it's available for root only (non-root cannot specify any groups). I have also added new command runuser(1) -- it's completely based on su(1) code. The difference is that runuser does not ask for password, has to be executed by root and it uses different PAM configuration (/etc/pam.d/runuser[-l]). The changes should be available in v2.23 (or easily backported to 2.22, I'll do that for Fedora). See master branch and "git whatchanged login-utils/". Karel -- Karel Zak <kzak@xxxxxxxxxx> http://karelzak.blogspot.com -- To unsubscribe from this list: send the line "unsubscribe util-linux" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html