can't push commit in sudo mode while using python-CodePudding

I have written a small python program (screen.py) that uses the keyboard lib. The essence of the program is to take screenshots by pressing ctrl 1 and send them to my github repository by pressing ctrl 2. Using the keyboard library requires that the program must be launched via sudo.

screen.py:

import keyboard
import pyautogui
import os

screenshot_num = 0

PICS_DIR = os.path.join(os.getcwd(), "pics")
SEND_TO_GIT_SCRIPT = os.path.join(os.getcwd(), "send.sh")
os.makedirs(PICS_DIR, exist_ok=True)


def make_screenshot():
    global screenshot_num
    myScreenshot = pyautogui.screenshot()
    myScreenshot.save(os.path.join(PICS_DIR, str(screenshot_num)   '.png'))
    screenshot_num  = 1


def send_to_git():
    os.system(SEND_TO_GIT_SCRIPT)


keyboard.add_hotkey('Ctrl   1', make_screenshot)
keyboard.add_hotkey('Ctrl   2', send_to_git)

keyboard.wait('Alt   q')

The problem is that when the program execution reaches the call to send.sh (code below), I get the following error:

ERROR:

» sudo python3 screen.py
New Pics
 3 files changed, 0 insertions( ), 0 deletions(-)
 rewrite screen/pics/0.png (97%)
 rewrite screen/pics/1.png (97%)
 rewrite screen/pics/2.png (97%)
[email protected]: Permission denied (publickey).
fatal: Could not read from remote repository.

Please make sure you have the correct access rights
and the repository exists.

send.sh:

git add ./pics/*
git commit -m 'New Pics'
git push

I connect to github via ssh, the key was created via sudo ssh-keygen. I connect to github via ssh. I have added keys generated both with and without sudo.

CodePudding user response：

You need to run the git commands as your regular user.

Unfortunately, Python only allows you to drop the privileges of the current process; you can then no longer switch back if you need to run some privileged code still.

Best practice and generally just good security hygiene would be to drop root privileges for everything which doesn't specifically require them. I tried to refactor your code to run as little as possible as root, but that turned out to be hard in this case. One would have to carve out parts into subprocesses, which doesn't really make much sense here.

Here's a quick and dirty refactoring which runs the shell subprocess as the invoking user, and fixes the ownership of any created files to avoid ending up with root-owned files created by a regular user, possibly in their home directory or elsewhere where they should be in control of the files.

import os
import subprocess

import keyboard
import pyautogui


screenshot_num = 0

# no need for os.getcwd() here
# see https://stackoverflow.com/questions/45591428
PICS_DIR = "pics"
SEND_TO_GIT_SCRIPT = os.path.join(".", "send.sh")


def fix_owner(filename) -> None:
    """
    Ensure that the file is owned by the unprivileged invoking user
    """
    os.chown(filename, int(os.environ["SUDO_UID"]), int(os.environ["SUDO_GID"]))

def unprivileged_subprocess(command: str) -> CompletedProcess:
    """
    Run the shell commands as the unprivileged invoking user
    """
    return subprocess.run(
        ["su", "-", os.environ["SUDO_USER"], "-c", command],
        check=True)


os.makedirs(PICS_DIR, exist_ok=True)
fix_owner(PICS_DIR)

def make_screenshot():
    global screenshot_num
    filename = os.path.join(PICS_DIR, str(screenshot_num)   '.png')
    myScreenshot = pyautogui.screenshot(filename)
    fix_owner(filename)
    screenshot_num  = 1

def send_to_git():
    unprivileged_subprocess(SEND_TO_GIT_SCRIPT)


keyboard.add_hotkey('Ctrl   1', make_screenshot)
keyboard.add_hotkey('Ctrl   2', send_to_git)

keyboard.wait('Alt   q')

This will crash with an unhelpful error message if the expected environment variables etc are not populated; perhaps add an explicit check to exit with a user-friendly instruction before attempting to do anything really if the script is not being run with sudo.

Perhaps a better general design would be to run the privileged code as a persistent subprocess (subprocess.Popen) and drop the privileges of the main script immediately after starting that up. Unfortunately, I don't know enough about keyboard or PyAutoGUI to attempt to implement that in this context. In vague terms, have something open the keyboard device as root, then communicate the results to the caller somehow? Or perhaps it would be enough to just open the device in privileged mode and then drop privileges for all the subsequent processing.