Re: Simple way for web to execute root shell script.

On Mon, 26 May 2025 20:44:58 +0100, The Natural Philosopher wrote:

On 26/05/2025 18:24, Dominik Ałaszewski wrote:
>

One can consider communicating via files. Apache writes a file in a
certain location (perhaps with the arguments for the script),
script run (as root) is then triggered via inotify mechanism (one can
utilise i.e. incron),
the results are written to another file, readable by Apache.
 

Why make stuff more complicated than it has to be?

Separation of privileges.

Replace “file + inotify” with “unix socket”, and you have a simpler
solution that still maintains the same separation of privileges.