When a role transition is needed for more than just a couple of commands, it is necessary to open a shell with the new role. This will ensure that the entire session is now running with the new role assigned to it. Every activity performed from within this session will then run with the target role.
Switching roles with sudo
or newrole
is done as follows:
Switching a role can be done using
sudo -i
orsudo -s
if allowed by thesudoers
file. If theROLE
andTYPE
attributes are set, then the target shell will have the proper context assigned:~$ id -Z dbadm_u:staff_r:staff_t:s0 ~$ sudo -u postgres -i Password: ~$ id -Z dbadm_u:dbadm_r:dbadm_t:s0
Switching roles can also be done using
newrole
:~$ newrole -r dbadm_r