prevent sudo command when executing a bash script

Question

I am aware that I can prevent sudo command while I execute script; Suppose I have one test bash script and I don’t want that someone executes this script by issuing the following command:

username:~#sudo ./test

I implement one of following methods to prevent the above execution, I also implement one die method for that.

if [[ $UID = 0 ]] ; then
  die "Please dont use sudo command with script"
fi

But i am not sure what I'm supposed to implement if root user themselves want to use the script. My above method will prevent root to use that script.

I am ok if root wants to execute script by this manner

root:~#./test

Kent · Accepted Answer · 2014-08-14 11:55:45Z

2

I think you could check $SUDO_USER

from man page of sudo:

SUDO_USER
Set to the login name of the user who invoked sudo.

a little test:

#!/bin/bash
[[ -z $SUDO_USER ]] && echo "Not from sudo" || echo "You are from sudo"

save it as t.sh then we have:

kent$  ./t.sh
Not from sudo

kent$  su
Password: 

root# ./t.sh
Not from sudo

kent$  sudo ./t.sh
You are from sudo

edited Aug 14, 2014 at 11:55

answered Aug 14, 2014 at 11:49

Kent

197k36 gold badges248 silver badges317 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Community · Accepted Answer · 2017-04-13 12:13:40Z

1

There is an answer on serverfault. In essence, there are multiple environment variables set:

SUDO_COMMAND
SUDO_USER
SUDO_UID
SUDO_GID

As noted in the linked post, they can be faked by setting them by hand. It might help you in your case, though.

edited Apr 13, 2017 at 12:13

CommunityBot

11 silver badge

answered Aug 14, 2014 at 11:51

martin

3,2591 gold badge29 silver badges37 bronze badges

Collectives™ on Stack Overflow

prevent sudo command when executing a bash script

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related