How to run from PHP a bash script under root user

Question

How to run from PHP a bash script under root user (with all permissions) and not nobody user - php default user?

thats my output after sudo visudo:

Defaults        env_keep += "LINES COLUMNS"
Defaults        env_keep += "LSCOLORS"
Defaults        env_keep += "SSH_AUTH_SOCK"
Defaults        env_keep += "TZ"
Defaults        env_keep += "DISPLAY XAUTHORIZATION XAUTHORITY"
Defaults        env_keep += "EDITOR VISUAL"
Defaults        env_keep += "HOME MAIL"

#User privilege specification
root    ALL=(ALL) ALL
%admin  ALL=(ALL) ALL


# Uncomment to allow people in group wheel to run all commands
# %wheel        ALL=(ALL) ALL

# Same thing without a password
# %wheel        ALL=(ALL) NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now

This sounds dangerous, so raises the obvious question: why do you need to do this? Perhaps this is a better overall solution. — Oliver Charlesworth
– Oliver Charlesworth, Commented Jun 6, 2012 at 13:34

Pavel Strakhov · Accepted Answer · 2012-06-06 13:41:05Z

35

You can use sudo:

exec("sudo /your/script");

You should allow executing your script without password prompt. Run sudo visudo in console and add the following string to the end:

nobody ALL = NOPASSWD: /your/script

You must set up file mode properly to ensure that no one can modify this script and put dangerous contents into it (in root console):

chown root:root /your/script
chmod 755 /your/script

answered Jun 6, 2012 at 13:41

Pavel Strakhov

40.8k6 gold badges93 silver badges131 bronze badges

Sign up to request clarification or add additional context in comments.

5 Comments

Oleg Over a year ago

Where exactly i should add it? I publish my output after sudo visudo in the question

Pavel Strakhov Over a year ago

Just put new line to the end of file.

Oleg Over a year ago

@Riateche I did it all! cant run it... i am calling to xcodebuilde(Unix program) -nothing happens, in terminal works file.

Pavel Strakhov Over a year ago

Check return value of exec function. Pass $output and $return_var parameters and check their values too. They could contain some useful information.

Oleg Over a year ago

checked it. output=Array and return_var=69.

Sjoerd · Accepted Answer · 2017-08-03 07:59:02Z

1

You can make a program which is set-uid root. This causes the program to always run as root. This doesn't work with shell scripts, so you have to use a program which calls your script.

edited Aug 3, 2017 at 7:59

answered Jun 6, 2012 at 13:37

Sjoerd

75.9k16 gold badges140 silver badges180 bronze badges

1 Comment

Joel G Mathew Over a year ago

The link seems broken.

Ja͢ck · Accepted Answer · 2012-06-06 13:42:17Z

0

Under Linux you normally do this using sudo. Try to be as specific as possible, so not to give the script too many permissions.

For examples on how to use sudo: http://aplawrence.com/Basics/sudo.html

answered Jun 6, 2012 at 13:42

Ja͢ck

174k39 gold badges269 silver badges316 bronze badges

1 Comment

Oleg Over a year ago

The problem is that when i run it on terminal its works good, but when i run that bash script from php it isn't executed (other simple bash with cp,mv commands working), i think its 90% permissions.

J. Bruni · Accepted Answer · 2012-06-06 14:10:17Z

0

I would add a specific rule to allow this script to be called by nobody user, using sudo.

answered Jun 6, 2012 at 14:10

J. Bruni

20.5k13 gold badges80 silver badges93 bronze badges

8 Comments

J. Bruni Over a year ago

See Riateche's answer - you need to add the line nobody ALL = NOPASSWD: /your/script to the "visudo" file (sudoers configuration file). Of course, substitute /your/script by the path to your script.

Oleg Over a year ago

How can i edit this file? i used sudo visudo but it's shows only the output.

J. Bruni Over a year ago

Strange. sudo visudo should open it in a file editor: google.com.br/search?q=visudo

J. Bruni Over a year ago

You can change the editor visudo uses by typing EDITOR=nano (for example)... in "nano", use CTRL+O, CTRL+X to save the file...

Oleg Over a year ago

I cant do nothing with it, i open the file - Cant save it, it wont close, its duplicates himself....

|

MerlinTheMagic · Accepted Answer · 2016-05-18 11:53:01Z

-1

I recently published a project that allows PHP to obtain and interact with a real Bash shell (as user: apache/www-data or root if needed). Get it here: https://github.com/merlinthemagic/MTS

After downloading you would simply use the following code:

$shell    = \MTS\Factories::getDevices()->getLocalHost()->getShell('bash', true);
$return1  = $shell->exeCmd('/full/path/to/script.sh');

answered May 18, 2016 at 11:53

MerlinTheMagic

6047 silver badges18 bronze badges

Collectives™ on Stack Overflow

How to run from PHP a bash script under root user

5 Answers 5

5 Comments

1 Comment

1 Comment

8 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

5 Answers 5

5 Comments

1 Comment

1 Comment

8 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related