sudo 中的 www-data 与 mount

Question

Unable to launch the mount command via php and exec

Of course : The file sudo toto.sh works and www-data is allowed in sudoers to ALL so all processes www-data ALL = (ALL) NOPASSWD: ALL

toto.sh:

Machine = "L1069"
machine="L1069"
mount -t cifs //$ipaddr/c$ /mnt/pc-backup/$machine -o   "vers=2.0,username=agent-back-ws,password=Bcth2,ro,iocharset=utf8
,noserverino"

In the go.php file:

$outputShell=passthru('sudo cat /etc/passwd');
$output=exec('sudo  /var/www/html/toto.sh 2>&1');
var_dump ($output);
var_dump ($outputShell);

When I run php go.php (as root) I get:

<pre> </ pre> string (0) ""

and mount is done and the content of / etc / passwd is displayed

---

On the other hand via the browser I launch www / go.php so in www-data: I get:

string (0) ""

no mount and the content of / etc / passwd is displayed

Why the mount does not work is the problem seems the script with php7 and latest Debian version ...

Help !!!!!!! works in debian 8 and php 5.5
> L106529
passe dans gosuite.sh ....
Machine : L106529 -  IP: xxx.xxx.250.185
Commande passee :  /bin/mount -t cifs //xxx.xxx.250.185/c$ /mnt/pc-backup/L106529 -o "vers=2.0,username=agent-backup-ws,password=BcK312Eth2,ro,iocharset=utf8,noserverino"
execve("/bin/mount", ["/bin/mount", "-t", "cifs", "//xxx.xxx.250.185/c$", "/mnt/pc-backup/L106529", "-o", "vers=2.0,username=agent-backup-w"...], [/* 16 vars */]) = 0

[pid 26704] mount("//xxx.xxx.250.185/c$", ".", "cifs", MS_RDONLY, "ip=xxx.xxx.250.185,unc=\\\\xxx.xxx.2"...) = 0
[pid 26704] capset({_LINUX_CAPABILITY_VERSION_3, 26704}, {CAP_SYS_ADMIN, CAP_DAC_OVERRIDE|CAP_DAC_READ_SEARCH|CAP_SYS_ADMIN, 0}) = 0

not works in debian 9 php 7 :

L106529
passe dans gosuite.sh ....
Machine : L106529 -  IP: xxx.xxx.250.185
Commande passee :  /bin/mount -t cifs //xxx.xxx.250.185/c$ /mnt/pc-backup/L106529 -o "vers=2.0,username=agent-backup-ws,password=BcK312Eth2,ro,iocharset=utf8,noserverino"
execve("/bin/mount", ["/bin/mount", "-t", "cifs", "//xxx.xxx.250.185/c$", "/mnt/pc-backup/L106529", "-o", "vers=2.0,username=agent-backup-w"...], [/* 16 vars */]) = 0
brk(NULL)                               = 0x5565ff8c5000
pid 14506] capget({version=0 /* _LINUX_CAPABILITY_VERSION_??? */, pid=0}, NULL) = 0
[pid 14506] gettid()                    = 14506
[pid 14506] open("/proc/sys/kernel/cap_last_cap", O_RDONLY) = 3
[pid 14506] read(3, "37\n", 7)          = 3
[pid 14506] close(3)                    = 0

Answer 1

When you run the script from your "root context", you do not have to use the full paths to the executables you use.

You should use the full path to the binary in your scripts.

Machine = "L1069"
machine="L1069"
/bin/mount -t cifs //$ipaddr/c$ /mnt/pc-backup/$machine -o   "vers=2.0,username=agent- 
back-ws,password=Bcth2,ro,iocharset=utf8
,noserverino"

and

$outputShell=passthru('sudo /bin/cat /etc/passwd');
$output=exec('sudo  /var/www/html/toto.sh 2>&1');
var_dump ($output);
var_dump ($outputShell);

To identify the correct path, use whereis mount and whereis cat