Re: Simple way for web to execute root shell script.

From	Lew Pitcher <lew.pitcher@digitalfreehold.ca>
Newsgroups	comp.os.linux.misc, comp.sys.raspberry-pi
Subject	Re: Simple way for web to execute root shell script.
Date	2025-05-23 14:08 +0000
Organization	A noiseless patient Spider
Message-ID	<100pvgp$40ea$1@dont-email.me> (permalink)
References	<100pphq$2taj$2@dont-email.me>

Cross-posted to 2 groups.

Show all headers | View raw

On Fri, 23 May 2025 13:26:34 +0100, The Natural Philosopher wrote:

> I have a shell script that monitors hardware stuff - it needs to run as 
> root and be called by Apache as user www.

As you probably already know, the system won't run shell scripts as setuid,
even if the setuid bit is set. So, the direct route is out.

> 
>   Bookworm linux on a Pi4.
> 
> Its all inside a domestic firewall so security is not a huge issue.
> What is the quickest and simplest solution to this?

My gut reaction would be to have the webserver use sudo(1) (with suitable
limitations set in the /etc/sudoers file) to run the script via a system(3)
call.

If you mistrust sudo(1), then you /could/ write a simple setuid wrapper program
that executes the script after making some rudimentary userid checks
(ruid == www, euid == root, etc. (perhaps check that session leader is apache?))

HTH
-- 
Lew Pitcher
"In Skills We Trust"

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 13:26 +0100
  Re: Simple way for web to execute root shell script. Pancho <Pancho.Jones@protonmail.com> - 2025-05-23 13:51 +0100
    Re: Simple way for web to execute root shell script. Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2025-05-23 14:47 +0000
      Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 16:06 +0100
    Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 16:00 +0100
  Re: Simple way for web to execute root shell script. Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2025-05-23 14:08 +0000
    Re: Simple way for web to execute root shell script. Lew Pitcher <lew.pitcher@digitalfreehold.ca> - 2025-05-23 14:23 +0000
      Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 16:03 +0100
    Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 16:02 +0100
      Re: Simple way for web to execute root shell script. Marc Haber <mh+usenetspam1118@zugschl.us> - 2025-05-23 17:24 +0200
        Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 17:53 +0100
        Re: Simple way for web to execute root shell script. Lawrence D'Oliveiro <ldo@nz.invalid> - 2025-05-24 00:37 +0000
  Re: Simple way for web to execute root shell script. John-Paul Stewart <jpstewart@personalprojects.net> - 2025-05-23 10:14 -0400
    Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 16:05 +0100
  Re: Simple way for web to execute root shell script. Eli the Bearded <*@eli.users.panix.com> - 2025-05-23 16:46 +0000
  Re: Simple way for web to execute root shell script. Rich <rich@example.invalid> - 2025-05-23 18:44 +0000
    Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-23 21:44 +0100
      Re: Simple way for web to execute root shell script. Rich <rich@example.invalid> - 2025-05-24 02:13 +0000
        Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-24 09:18 +0100
      Re: Simple way for web to execute root shell script. Theo <theom+news@chiark.greenend.org.uk> - 2025-05-24 08:27 +0100
      Re: Simple way for web to execute root shell script. Chris Elvidge <chris@internal.net> - 2025-05-24 13:28 +0100
      Re: Simple way for web to execute root shell script. Anssi Saari <anssi.saari@usenet.mail.kapsi.fi> - 2025-05-25 10:17 +0300
        Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-25 08:52 +0100
          Re: Simple way for web to execute root shell script. Lawrence D'Oliveiro <ldo@nz.invalid> - 2025-05-25 09:42 +0000
            Re: Simple way for web to execute root shell script. vallor <vallor@cultnix.org> - 2025-05-29 03:04 +0000
              Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-29 12:03 +0100
          Re: Simple way for web to execute root shell script. Anssi Saari <anssi.saari@usenet.mail.kapsi.fi> - 2025-05-26 11:27 +0300
            Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-26 12:31 +0100
            Re: Simple way for web to execute root shell script. druck <news@druck.org.uk> - 2025-05-27 21:44 +0100
              Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-28 08:58 +0100
                Re: Simple way for web to execute root shell script. druck <news@druck.org.uk> - 2025-05-28 21:34 +0100
                Re: Simple way for web to execute root shell script. Anssi Saari <anssi.saari@usenet.mail.kapsi.fi> - 2025-05-29 10:07 +0300
                Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-29 12:14 +0100
                Re: Simple way for web to execute root shell script. Anssi Saari <anssi.saari@usenet.mail.kapsi.fi> - 2025-05-30 20:53 +0300
                Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-30 19:36 +0100
                Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-29 11:36 +0100
                Re: Simple way for web to execute root shell script. Rich <rich@example.invalid> - 2025-05-29 14:41 +0000
                Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-29 18:47 +0100
  Re: Simple way for web to execute root shell script. druck <news@druck.org.uk> - 2025-05-23 22:17 +0100
  Re: Simple way for web to execute root shell script. Lawrence D'Oliveiro <ldo@nz.invalid> - 2025-05-23 23:11 +0000
  Re: Simple way for web to execute root shell script. c186282 <c186282@nnada.net> - 2025-05-24 01:43 -0400
    Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-24 09:20 +0100
      Re: Simple way for web to execute root shell script. Richard Kettlewell <invalid@invalid.invalid> - 2025-05-24 10:58 +0100
        Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-24 11:27 +0100
        Re: Simple way for web to execute root shell script. Eli the Bearded <*@eli.users.panix.com> - 2025-05-24 17:55 +0000
          Re: Simple way for web to execute root shell script. Richard Kettlewell <invalid@invalid.invalid> - 2025-05-24 19:24 +0100
      Re: Simple way for web to execute root shell script. Rich <rich@example.invalid> - 2025-05-24 15:41 +0000
  Re: Simple way for web to execute root shell script. Andrew Smallshaw <andrews@sdf.org> - 2025-05-24 17:35 +0000
    Re: Simple way for web to execute root shell script. Fritz Wuehler <fritz@spamexpire-202505.rodent.frell.theremailer.net> - 2025-05-24 23:34 +0200
  Re: Simple way for web to execute root shell script. Dominik Ałaszewski <Dominik.Alaszewski@gazeta.pl.invalid> - 2025-05-26 17:24 +0000
    Re: Simple way for web to execute root shell script. The Natural Philosopher <tnp@invalid.invalid> - 2025-05-26 20:44 +0100
      Re: Simple way for web to execute root shell script. Lawrence D'Oliveiro <ldo@nz.invalid> - 2025-05-26 22:22 +0000
    Re: Simple way for web to execute root shell script. c186282 <c186282@nnada.net> - 2025-05-27 01:48 -0400

csiph-web