bash from web

athrin · 04-24-2011, 08:20 PM

Quote:

Originally Posted by MTK358

If so, you can make sudo run the dmidecode command for a certain user without asking for a password. Run visudo and add this line:

Code:

username ALL = NOPASSWD: path-to-dmidecode-executable

so i need to add

Code:

username ALL = NOPASSWD: path-to-dmidecode-executable

inside visudo then run the program? do i need to change anything in .sh file or in .php file?

MTK358 · 04-24-2011, 08:31 PM

Quote:

Originally Posted by athrin

so i need to add

Code:

username ALL = NOPASSWD: path-to-dmidecode-executable

inside visudo then run the program?

I don't understand what that means. visudo is a program that launches a text editor and then confirms the syntax after you exit the editor. It uses the vi editor by default. If you want to use a different editor (nano, for example), do it like this:

Code:

EDITOR=nano visudo

Quote:

Originally Posted by athrin

do i need to change anything in .sh file or in .php file?

Wherever you run "dmidecode", run "sudo" with "dmidecode" as the first argument, instead.

athrin · 04-24-2011, 08:38 PM

where can i put this?

Code:

username ALL = NOPASSWD: path-to-dmidecode-executable

MrCode · 04-24-2011, 09:38 PM

Quote:

where can i put this?

Code:

 username ALL = NOPASSWD: path-to-dmidecode-executable

This isn't meant literally; "username" should be replaced with the name of the normal user of the system, and "path-to-dmidecode-executable" should be replaced with the literal path to dmidecode itself (e.g. "/usr/sbin/dmidecode").

It's placed inside the /etc/sudoers file using visudo, which is a special utility made to securely edit /etc/sudoers.

athrin · 04-24-2011, 11:23 PM

Quote:

Originally Posted by MrCode

This isn't meant literally; "username" should be replaced with the name of the normal user of the system, and "path-to-dmidecode-executable" should be replaced with the literal path to dmidecode itself (e.g. "/usr/sbin/dmidecode").

It's placed inside the /etc/sudoers file using visudo, which is a special utility made to securely edit /etc/sudoers.

oh then it like this

Code:

root ALL = NOPASSWD: /var/www/cgi-bin/example.sh

micxz · 04-24-2011, 11:58 PM

athrin:
Remember when you execute a php file it will execute as the user the web server is running as e.g. "apache". So the above sudoers file would for example contain:

Code:

apache ALL = NOPASSWD: /var/www/cgi-bin/example.sh

What your saying here is "let the user apache run example.sh as root without a password prompt"

But I don't know if this is the safest way as it seem like you would want to avoid escalating apache to root even if it's only one command. I like the cron idea the best so far if you don't need real time results.

micxz · 04-25-2011, 12:27 AM

Also be aware the above example will run everything in example.sh as root not just the dmidecode part within. should stick to the the path-to-dmidecode-executable examples above if your going this route.

athrin · 04-25-2011, 02:25 AM

Code:

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# User privilege specification
root    ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %wheel        ALL=(ALL)       ALL

# Same thing without a password
# %wheel        ALL=(ALL)       NOPASSWD: ALL

# Samples
# %users  ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users  localhost=/sbin/shutdown -h now

it got many slot. which one should i fill?

MTK358 · 04-25-2011, 08:05 AM

Quote:

Originally Posted by athrin

oh then it like this

Code:

root ALL = NOPASSWD: /var/www/cgi-bin/example.sh

That's still not right. Put the path to the dmidecode executable, not the script that runs dmidecode. Then modify the script to run "sudo dmidecode" instead of "dmidecode".

Also, the username should be for the account that the server uses, which might not be root.

MTK358 · 04-25-2011, 08:07 AM

Quote:

Originally Posted by athrin

it got many slot. which one should i fill?

Anywhere.

But to make it organized, put it under the "User privilege specification" section. (Note that the lines beginning with "#" are ignored, they are just comments for human readers, not some kind of "slots").

athrin · 04-25-2011, 09:29 PM

Quote:

Originally Posted by MTK358

That's still not right. Put the path to the dmidecode executable, not the script that runs dmidecode. Then modify the script to run "sudo dmidecode" instead of "dmidecode".

Also, the username should be for the account that the server uses, which might not be root.

oh well i'm login using root.. so that mean the username is root right? or ip addrs? you said path to dmidecode
so it like this?

Code:

root ALL = NOPASSWD: /var/www/cgi-bin/

micxz · 04-25-2011, 11:46 PM

I sure your web server does not run as root. I think you should wrap your head around sudo before making cut and paste solutions. We are trying to help you understand the tools as well as use them.

1. man sudo
2. look at what user you server is running as? user nobody or most likely apache
3. implement the above suggestions making dmidecode available to the user found in step two via sudo.
4. create your cgi or php script and call it via, "sudo dmidecode".

hope this helps.

athrin · 04-26-2011, 02:59 AM

Quote:

Originally Posted by micxz

I sure your web server does not run as root. I think you should wrap your head around sudo before making cut and paste solutions. We are trying to help you understand the tools as well as use them.

1. man sudo
2. look at what user you server is running as? user nobody or most likely apache
3. implement the above suggestions making dmidecode available to the user found in step two via sudo.
4. create your cgi or php script and call it via, "sudo dmidecode".

already tried httpd and apache. didnt work..
i already have sh and php script. =_=

MTK358 · 04-26-2011, 08:42 AM

Quote:

Originally Posted by athrin

oh well i'm login using root.. so that mean the username is root right?

No, it doesn't. The server might have its own, separate account.

Quote:

Originally Posted by athrin

you said path to dmidecode
so it like this?

Code:

root ALL = NOPASSWD: /var/www/cgi-bin/

Where do you see "dmidecode" in that path? I sure don't.

Code:

replace-this-with-the-server's-username ALL = NOPASSWD: /usr/sbin/dmidecode

Note that it might not be "/usr/sbin" for all systems. This is for my Arch system.

micxz · 04-26-2011, 12:31 PM

to find out your server user:
cat httpd.conf | grep User