run part of python script as sudo

Question

I'm trying to run only a part of my script task.py in sudo mode. Ideally I would run task.py with the following structure:

if __name__ == '__main__':
    print('running normal parts')        
    .            .              .
    . [running normal commands] .
    .            .              .

    print('running sudo parts')
    .            .              .
    .  [running sudo commands]  .
    .            .              .

where I don't have to enter a password for the sudo parts of the script so that I can just make a single call $ python task.py from command line.

Is there a nice to tell Python to run the second block as sudo? I saw the subprocess module had a way to call a command with sudo privelages, but I'd rather not put the "sudo parts" into a separate script to do the "running sudo commands" part.

sudo won't run commands as root without having to type password, unless if you define a rule for that in /etc/sudoers to run a command as user or root without password. You need to be extra cautious with that. — GIZ
– GIZ, Commented Aug 14, 2017 at 20:24

tdube · Accepted Answer · 2018-02-09 19:42:19Z

1

I would highly recommend putting the sudo parts into a separate script just as the documentation recommended. That approach improves the security posture of your script dramatically as only the part necessary to execute with elevated privileges does (aka "least privilege"--a fundamental security principle).

I haven't read that documentation in detail, but I suspect it also mentions limiting write privileges to the sudo portion of the script as well and any file or resource that it may read from.

edited Feb 9, 2018 at 19:42

answered Aug 14, 2017 at 20:15

tdube

2,5732 gold badges18 silver badges25 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

run part of python script as sudo

1 Answer 1

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related