Run command as not-root

Hi everyone

At work, I have to run a command in an AWS instance. In that particular instance only exists the root user. The command should not be executed with root privileges (it executes mpirun, which is not recommended to run as sudo or the machine might break), so I was wondering if there is a way to block or disable the sudo privileges while the command is running. As mentioned, the only user existing there is root, so I suppose “sudo -u” is not an option.

Does anyone know how to do it? Thanks in advance!

@linux

  • Nicolas Rojas@social.vivaldi.netOP
    link
    fedilink
    arrow-up
    1
    ·
    1 year ago

    @astraeus yep, completely agree on the security issues, that is a mistake that should be fixed. But for the moment I confirmed that root is the only user, and every file and program in the instance can only be used by root (I just created a new user and tried to run the command with su -c but got a lot of permission denials and command not found)
    If I could hide or disable my own sudo permissions that would save me a lot of work, but I’m starting to think that something like that doesn’t exist 🙁

    • astraeus@programming.dev
      link
      fedilink
      arrow-up
      4
      ·
      1 year ago

      Unfortunately hiding sudo from root would lead to much greater issues. You can remove sudo privileges from a non-root user, but I don’t think there’s a feasible way to do so for root.

      Does your new user have a proper shell setup? If you type bash in the new user’s terminal does it give you anything?

      • ursakhiin@beehaw.org
        link
        fedilink
        arrow-up
        2
        ·
        1 year ago

        If everything on the machine is owned by root and does not provide global read or execute permissions then a new user would not be able to access it without being in the root group. Assuming the files have group permissions set at all anyways.

    • elscallr@lemmy.world
      link
      fedilink
      arrow-up
      3
      ·
      1 year ago

      I don’t think you understand what root is. By definition it has those permissions because it’s root.