PHP Exec Sudo/Exim commands

Question

I'm trying to get a sudo command to execute from within PHP. For simplicity sake, I'm using passthru wrapped in pre tags. Long story short, I want to get some exim stats.

I'm on a CentOS box.

After logging in via shell, I added the following line via visudo.

myuser      ALL = NOPASSWD: /usr/sbin/exiwhat

I can successfully execute the exiwhat command using either of the following commands when shelled in.

sudo -u myuser -H /usr/sbin/exiwhat
sudo -u myuser -H exiwhat

I've even tried becoming the the user via su and am still successful.

su myuser
sudo /usr/sbin/exiwhat
-or-
sudo exiwhat

My php script looks a little something like this.

<?php
echo '<pre>';
passthru('whoami');
echo "\n1)";
passthru('sudo exiwhat');
echo "\n2)";
passthru('sudo /usr/sbin/exiwhat');
echo "\n3)";
passthru('exiwhat');
echo "\n4)";
passthru('/usr/sbin/exiwhat');
echo "\n";
echo '</pre>';

All I get back is:

myuser

1)
2)
3)
4)No exim process data

I've tried the same with

exec('exiwhat',$output);

but output returns as an empty array.

I can get simple things like "ps aux" or "dir" to work just fine. Please help.

Possible Duplicate: How to call shell script from php that requires SUDO?

Note: I can run exiwhat via command line and get a good chunk of output. We have several hundred emails in the queue at any point in time.

UPDATE: Per another thread, I added " 2>&1" to each command and got the following

myuser

1)sudo: sorry, you must have a tty to run sudo

2)sudo: sorry, you must have a tty to run sudo

3)sh: exiwhat: command not found

4)/bin/rm: cannot remove `/var/spool/exim/exim-process.info': Permission denied
exim(770): Operation not permitted
exim(8016): Operation not permitted
exim(15618): Operation not permitted
exim(15626): Operation not permitted
exim(16751): Operation not permitted
exim(16765): Operation not permitted
exim(32207): Operation not permitted
exim: no process killed
No exim process data

UPDATE: I added the following line via visudo and my sudo commands now work

Defaults:myuser !requiretty

Is that save to leave like that though?

Further note: Running mod_suphp, so each process should run as its respective user, hopefully as indicated by the whoami command. — GameCharmer
– GameCharmer, Commented Apr 4, 2014 at 18:26

Alex Barker · Accepted Answer · 2014-04-04 18:33:53Z

2

Edit your /etc/sudoers file and remove the line about Default requiretty.

**Update I guess this options enabled by default so add something like the following instead:

Defaults:myuser        !requiretty

answered Apr 4, 2014 at 18:33

Alex Barker

4,4084 gold badges31 silver badges53 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

GameCharmer Over a year ago

Found that over at the following link and got it in just before you posted. serverfault.com/questions/111064/…

Collectives™ on Stack Overflow

PHP Exec Sudo/Exim commands

1 Answer 1

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related