从PHP脚本运行“ sudo”命令？

Question

I want to run a "sudo" command from the PHP and I have read all the tutorials on the web, but no solution works. At least I've added the default "nobody" user of LAMP to the root group – but no effect.

echo exec("sudo echo hi");

A note on security:

While some people here are downvoting this due to their strong belief that this will create a big security hole that will destroy the entire Internet, there are some valid cases for this, eg, in testing. Running setup scripts from PHPUnit / Behat suites to configure the environment may require sudo permission. Those scripts are not accessible from the application and do not create security holes, as the matter of fact they help to ensure such holes are not present.

Answer 1

Adding users to the root group does not give them sudo rights, that is what /etc/sudoers is for.

To be honest, what you're trying to do sounds like a giant security hole

EDIT: copied from comments...

My suggestion would be something like, setting up a cron under the root user, that checks against a file or db that your PHP can write to, parses it, and remove the users you've specified.

Answer 2

I think you should run chmod u+s on your script. Or maybe ug+s (Depending on your need). This way you will have su access.

Answer 3

<?php

phpinfo();

?>

You first need to find the user of your webserver and give them root privialges, the above code will tell you this, but as others say THIS IS A MASSIVE SECURITY HOLE and I strongly do not recommend it.

Answer 4

All the security stuff aside, this is possible. Indeed as Jon Stirling has stated, adding users to a specific group is not going to help you. You need to specify the correct sudo lines with "visudo" as root, eg:

nobody ALL=(root) NOPASSWD:/usr/bin/echo hi

This will let the user root, execute the command "/usr/bin/echo hi" as the user root.

Now for executing it via PHP:

echo exec("/usr/bin/sudo -u root /usr/bin/echo hi");

Answer 5

您应该将您的网络服务器用户添加到/etc/sudoers文件中