Hi guys, I have a question .
If for example I wrote a program with crystal with like 3 functions, let’s say called func1, func2 and func3.
If I would like to call func2 as superuser, how should I proceed?
Is there another way than executing the func2 in another file with a Process.run ?
A process can only switch its uid if the process is run from a suid root binary (or if it’s run by the root user itself)
See seteuid(2)
99.99% of the time, this is a really bad idea.
What sometimes is done, if a Process absolutely cannot be run without some root access, it starts with root, does the thing for which it needs root access, and then changes it’s user id to something less privileged.
don’t use suid binaries ever.
If I’m reading your mind correctly…
In Ruby, packages that bundle binary files such as precompiled shared libraries are called “fat gems.” To avoid this, there is a gem called native-package-installer. This gem is triggered during the installation of Ruby gems via the build tasks for C extensions, and if there are dependent libraries, it executes platform-specific commands like apt, yum, or pkg. Technically, this is not particularly sophisticated—it simply calls commands using system().
However, from the user’s perspective, after executing a command such as gem install gtk3, they might be prompted to enter their password during the gem installation. Upon entering the password, an apt command is executed, creating a distinct user experience.
I’m not entirely sure what your intention was in asking the question, but perhaps it would offer a better user experience if the password prompt appeared when necessary.
(Translated from Japanese by ChatGPT)