How to Execute Privileged Command on SSH Login for Non-Root User

bashcommand linelinuxsshsshd

I am trying to run a command/script that requires root privileges when a non-root user logs into ssh

This unfortunately means I cannot use ~/.bashrc or /etc/bashrc

I also tried /etc/ssh/sshrc but it has the same problem, the command executes as the logged in user.

I see /etc/profile.d/ does something but not sure how to use it or if it will have the same problem.

sshd does run as root so I am hoping it can be taught to do this somehow

I do need to know the ip of the login for the command.

Thanks for any ideas!

added: sudo is not possible because it's for a non-privileged user without sudo rights

Best Answer

Use pam_exec as a PAM session module.

Related Solutions

Linux – su not working when non-root (authentification failure)

Some UNIX:es requires you to be member of the wheel group to be able to switch user. from wikipedia article:

Some Unix-like systems have a wheel group of users, and only allow these users 
to su to root.[1]
This may or may not mitigate these security concerns, since an intruder might
first simply break into one of those accounts.

Check weather your otheruser are a member, and maybe compare id userone with id usertwo and see if maybe userone is a member of groups which usertwo are not, granting extra privileges.

Linux – SSH with no password (passwordless) on Synology DSM 5 as other (non-root) user

I had the same problem. I run an instance of sshd in debug mode on the DiskStation using "/usr/syno/sbin/sshd -d", then I connect to it using "ssh user@DiskSation -vvv" and I got the debug info on the server:

......

debug1: temporarily_use_uid: 1026/100 (e=0/0)

debug1: trying public key file /var/services/homes/user/.ssh/authorized_keys

debug1: fd 5 clearing O_NONBLOCK

Authentication refused: bad ownership or modes for directory /volume1/homes/user

......

I realized that the home folder needs the right permissions too:

cd /var/services/homes/
chown <username> <username>
chmod 755 <username>

And replace with the actual username, like "user".

Finally, the problem is solved!

Best Answer

Related Solutions

Linux – su not working when non-root (authentification failure)

Linux – SSH with no password (passwordless) on Synology DSM 5 as other (non-root) user

Related Question