Re^6: creating a secure environment for perl scripts to run

Just be aware that su can also be used by root to downgrade to other users on occasion.

That can also be done by sudo:

/root>sudo -u nobody whoami
nobody

/root>
[download]

Add -i to get an interactive shell, if possible. Note that the nobody account is intentionally configured to have an invalid home directory and an invalid login shell, so you won't get an interactive shell as nobody.

/root>sudo -u nobody -i
sudo: unable to change directory to /nonexistent: No such file or dire
+ctory
sudo: unable to execute /usr/sbin/nologin: No such file or directory

/root>sudo -u alex -i

/home/alex>whoami
alex

/home/alex>exit
logout

/root>
[download]

Alexander

--
Today I will gladly share my knowledge and experience, for there are no sweeter words than "I told you so". ;-)

Comment on Re^6: creating a secure environment for perl scripts to run Select or Download Code

Replies are listed 'Best First'.
Re^7: creating a secure environment for perl scripts to run by hippo (Archbishop) on Feb 03, 2022 at 17:03 UTC
That can also be done by sudo Absolutely so. The reason for my caution in removing `su` was more that other subsystems/applications might be using it behind the scenes to achieve this and if you remove `su` then those processes might fail. 🦛	[reply] [d/l] [select]