runeffectivegroup

Data Type

String, modifiable

Description

runeffectivegroup provides control over the effective group ID (egid) of the secured task. Setting this to a group name makes that group the effective group for the task. If runeffectivegroup is not set, then the value of rungroup specifies the effective group.

Any change to the rungroup variable resets runeffectivegroup to the same value. If you want runeffectivegroup to be different from rungroup, then set runeffectivegroup after rungroup.

There is no read-only version of this variable.

This run variable does not apply to pbssh. If it is present in the policy, it does not have any effect on pbssh and is ignored.

Syntax

runeffectivegroup = group;

Valid Values

A string that contains a valid group name. The default value is the value of rungroup.

runeffectivegroup = "bin";