{
    "mode": "man",
    "parameter": "rush",
    "section": "1",
    "url": "https://www.chedong.com/phpMan.php/man/rush/1/json",
    "generated": "2026-06-16T22:13:50Z",
    "synopsis": "rush  [-ht]  [-C  CHECK] [-D ATTR[,ATTR...]] [-c COMMAND] [-d NUMBER] [-i] [-u USER] [--debug\nNUMBER] [--dump=ATTR[,ATTR...]] [--help] [--show-default] [--usage] [--version] [FILE]",
    "sections": {
        "NAME": {
            "content": "rush - restricted user shell\n",
            "subsections": []
        },
        "SYNOPSIS": {
            "content": "rush  [-ht]  [-C  CHECK] [-D ATTR[,ATTR...]] [-c COMMAND] [-d NUMBER] [-i] [-u USER] [--debug\nNUMBER] [--dump=ATTR[,ATTR...]] [--help] [--show-default] [--usage] [--version] [FILE]\n",
            "subsections": []
        },
        "NOTE": {
            "content": "This manpage is a short description of GNU rush.  For a detailed discussion, including  exam‐\nples  and  usage  recommendations,  refer  to the manual GNU Rush -- a restricted user shell,\navailable in texinfo format.  If the info reader and the rush documentation are properly  in‐\nstalled on your system, the command\n\ninfo rush\n\nshould give you access to the complete manual.\n\nYou  can  also view the manual using the info mode in emacs(1), or find it in various formats\nonline at\n\nhttp://www.gnu.org.ua/software/rush/manual\n\nIf any discrepancies occur between this manpage and the Manual, the later shall be considered\nthe authoritative source.\n",
            "subsections": []
        },
        "DESCRIPTION": {
            "content": "GNU rush is a restricted user shell, designed for sites that provide limited remote access to\ntheir resources, such as svn or git repositories, scp, or the like.\n\nUpon startup rush analyzes its command line and examines the set of  configuration  rules  to\ndetermine what kind of access the user is to be granted.\n",
            "subsections": []
        },
        "OPTIONS": {
            "content": "",
            "subsections": [
                {
                    "name": "-d --debug=",
                    "content": "Set debugging level.  The greater is the NUMBER, the more verbose is the logging.  The\ndebugging information is reported via syslog(3) using authpriv, priority debug.  Maxi‐\nmum meaningful value for NUMBER is 3.\n",
                    "flag": "-d"
                },
                {
                    "name": "-D --dump=",
                    "content": "Request  dump  mode.   Arguments  are the names of the attributes to be dumped, or the\nword all standing for all attributes.  Refer to the GNU Rush manual for a detailed de‐\nscription.\n",
                    "flag": "-D"
                },
                {
                    "name": "-t --test --lint",
                    "content": "Run in test mode.  When this option is given, the following occurs:\n\n1.     All diagnostic messages are redirected to standard error, instead of syslog.\n\n2.     If  a  single non-option argument is present, it is taken as a name of the con‐\nfiguration file to use.\n\n3.     The configuration file is parsed.  If parsing fails, the program exits with the\ncode 1.\n\n4.     If  the -c option is present, rush processes its argument as usual, except that\nthe command itself is not executed.\n",
                    "flag": "-t",
                    "long": "--lint"
                },
                {
                    "name": "-u --user=",
                    "content": "Supplies user name for use with --test.\n",
                    "flag": "-u"
                },
                {
                    "name": "-c",
                    "content": "Execute COMMAND.\n",
                    "flag": "-c"
                },
                {
                    "name": "-C --security-check=",
                    "content": "Add or remove configuration security check.  The argument is one of the following:\n\nall    Enable all checks.\n\nowner  Check if the file is owned by root.\n\niwgrp, groupwritablefile\nCheck if the file is not group writable.\n\niwoth, worldwritablefile\nCheck if the file is not world writable.\n\ndiriwgrp, groupwritabledir\nCheck if the directory where the file resides is not group writable.\n\ndiriwoth, worldwritabledir\nCheck if the directory where the file resides is not world writable.\n\nlink   Check if the file is not a symbolic link to a file residing in a group or world\nwritable directory.\n",
                    "flag": "-C"
                },
                {
                    "name": "-i",
                    "content": "uration allow interactive access.\n",
                    "flag": "-i"
                },
                {
                    "name": "--show-default",
                    "content": "Show default configuration.\n",
                    "long": "--show-default"
                }
            ]
        },
        "SEE ALSO": {
            "content": "rush.rc(5), rushlast(1), rushwho(1).\n",
            "subsections": []
        },
        "AUTHORS": {
            "content": "Sergey Poznyakoff\n",
            "subsections": []
        },
        "BUG REPORTS": {
            "content": "Report bugs to <bug-rush@gnu.org.ua>.\n",
            "subsections": []
        },
        "COPYRIGHT": {
            "content": "Copyright © 2016 Sergey Poznyakoff\nLicense GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>\nThis is free software: you are free to change and redistribute it.  There is NO WARRANTY,  to\nthe extent permitted by law.\n\n\n\nRUSH                                       August 20, 2016                                   RUSH(1)",
            "subsections": []
        }
    },
    "summary": "rush - restricted user shell",
    "flags": [
        {
            "flag": "-d",
            "long": null,
            "arg": null,
            "description": "Set debugging level. The greater is the NUMBER, the more verbose is the logging. The debugging information is reported via syslog(3) using authpriv, priority debug. Maxi‐ mum meaningful value for NUMBER is 3."
        },
        {
            "flag": "-D",
            "long": null,
            "arg": null,
            "description": "Request dump mode. Arguments are the names of the attributes to be dumped, or the word all standing for all attributes. Refer to the GNU Rush manual for a detailed de‐ scription."
        },
        {
            "flag": "-t",
            "long": "--lint",
            "arg": null,
            "description": "Run in test mode. When this option is given, the following occurs: 1. All diagnostic messages are redirected to standard error, instead of syslog. 2. If a single non-option argument is present, it is taken as a name of the con‐ figuration file to use. 3. The configuration file is parsed. If parsing fails, the program exits with the code 1. 4. If the -c option is present, rush processes its argument as usual, except that the command itself is not executed."
        },
        {
            "flag": "-u",
            "long": null,
            "arg": null,
            "description": "Supplies user name for use with --test."
        },
        {
            "flag": "-c",
            "long": null,
            "arg": null,
            "description": "Execute COMMAND."
        },
        {
            "flag": "-C",
            "long": null,
            "arg": null,
            "description": "Add or remove configuration security check. The argument is one of the following: all Enable all checks. owner Check if the file is owned by root. iwgrp, groupwritablefile Check if the file is not group writable. iwoth, worldwritablefile Check if the file is not world writable. diriwgrp, groupwritabledir Check if the directory where the file resides is not group writable. diriwoth, worldwritabledir Check if the directory where the file resides is not world writable. link Check if the file is not a symbolic link to a file residing in a group or world writable directory."
        },
        {
            "flag": "-i",
            "long": null,
            "arg": null,
            "description": "uration allow interactive access."
        },
        {
            "flag": "",
            "long": "--show-default",
            "arg": null,
            "description": "Show default configuration."
        }
    ],
    "examples": [],
    "see_also": [
        {
            "name": "rush.rc",
            "section": "5",
            "url": "https://www.chedong.com/phpMan.php/man/rush.rc/5/json"
        },
        {
            "name": "rushlast",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/rushlast/1/json"
        },
        {
            "name": "rushwho",
            "section": "1",
            "url": "https://www.chedong.com/phpMan.php/man/rushwho/1/json"
        }
    ]
}