如何在 python 脚本中提升为 root？
How to elevate to root within a python script?
我正在尝试编写一个 python 脚本，它会请求 root 权限。我曾尝试对 python 使用 elevate（它应该会显示一个对话框，要求输入 root 或“admin”密码），但是当我 运行 它时，它给出了“没有这样的文件或目录”错误。
import os
from elevate import elevate
def is_root():
return os.getuid() == 0
print("before ", is_root())
elevate()
print("after ", is_root())
为什么会这样？是否有任何使用系统 GUI 的可行替代方案？
编辑：
我在 Python 3.6 上使用 Kubuntu 18，但我希望它也能在 Windows 上运行。
进一步编辑：
这是一个关于对话框的问题（针对 basic/Windows 用户），而不是 TUI。
这是一个在 Windows 和 Linux 下工作的完整解决方案，可以将 UAC 或 sudo 提升到根目录，无论代码是用 Nuitka 解释、冻结还是编译都有效。
[编辑]
免责声明：此 post 中的代码已过时。
我已将提升代码作为 python 包发布。
使用 pip install command_runner
安装
用法：
from command_runner.elevate import elevate
def main():
"""My main function that should be elevated"""
print("Who's the administrator, now ?")
if __name__ == '__main__':
elevate(main)
[/编辑]
代码主要检查它是否已经提升，如果是，运行s main() 函数，如果没有，它会生成一个提升的子进程，它将 运行 main() 函数。
希望对您有所帮助
import os
import sys
import subprocess
import logging
if os.name == 'nt':
try:
import ctypes
# import ctypes # In order to perform UAC check with ctypes.windll.shell32.ShellExecuteW()
import win32event # monitor process
import win32process # monitor process
from win32com.shell.shell import ShellExecuteEx
from win32com.shell import shellcon
except ImportError:
raise ImportError('Cannot import ctypes for checking admin privileges on Windows platform.')
logger = logging.getLogger(__name__)
def main():
# Your code goes here
# Keep in mind that elevating under windows will not redirect stdout/stderr to the main process
print('Hello, elevated world !')
def is_admin():
"""
Checks whether current program has administrative privileges in OS
Works with Windows XP SP2+ and most Unixes
:return: Boolean, True if admin privileges present
"""
current_os_name = os.name
# Works with XP SP2 +
if current_os_name == 'nt':
try:
return ctypes.windll.shell32.IsUserAnAdmin() == 1
except Exception:
raise EnvironmentError('Cannot check admin privileges')
elif current_os_name == 'posix':
# Check for root on Posix
return os.getuid() == 0
else:
raise EnvironmentError('OS does not seem to be supported for admin check. OS: %s' % current_os_name)
# Improved answer I have done in
if __name__ == '__main__':
if is_admin():
main(sys.argv)
else:
# UAC elevation / sudo code working for CPython, Nuitka >= 0.6.2, PyInstaller, PyExe, CxFreeze
# Regardless of the runner (CPython, Nuitka or frozen CPython), sys.argv[0] is the relative path to script,
# sys.argv[1] are the arguments
# The only exception being CPython on Windows where sys.argv[0] contains absolute path to script
# Regarless of OS, sys.executable will contain full path to python binary for CPython and Nuitka,
# and full path to frozen executable on frozen CPython
# Recapitulative table create with
# (CentOS 7x64 / Python 3.4 / Nuitka 0.6.1 / PyInstaller 3.4) and
# (Windows 10 x64 / Python 3.7x32 / Nuitka 0.6.2.10 / PyInstaller 3.4)
# --------------------------------------------------------------------------------------------------------------
# | OS | Variable | CPython | Nuitka | PyInstaller |
# |------------------------------------------------------------------------------------------------------------|
# | Lin | argv | ['./script.py', '-h'] | ['./test', '-h'] | ['./test.py', -h'] |
# | Lin | sys.executable | /usr/bin/python3.4 | /usr/bin/python3.4 | /absolute/path/to/test |
# | Win | argv | ['C:\Python\test.py', '-h'] | ['test', '-h'] | ['test', '-h'] |
# | Win | sys.executable | C:\Python\python.exe | C:\Python\Python.exe | C:\absolute\path\to\test.exe |
# --------------------------------------------------------------------------------------------------------------
# Nuitka 0.6.2 and newer define builtin __nuitka_binary_dir
# Nuitka does not set the frozen attribute on sys
# Nuitka < 0.6.2 can be detected in sloppy ways, ie if not sys.argv[0].endswith('.py') or len(sys.path) < 3
# Let's assume this will only be compiled with newer nuitka, and remove sloppy detections
try:
# Actual if statement not needed, but keeps code inspectors more happy
if __nuitka_binary_dir is not None:
is_nuitka_compiled = True
except NameError:
is_nuitka_compiled = False
if is_nuitka_compiled:
# On nuitka, sys.executable is the python binary, even if it does not exist in standalone,
# so we need to fill runner with sys.argv[0] absolute path
runner = os.path.abspath(sys.argv[0])
arguments = sys.argv[1:]
# current_dir = os.path.dirname(runner)
logger.debug('Running elevator as Nuitka with runner [%s]' % runner)
logger.debug('Arguments are %s' % arguments)
# If a freezer is used (PyInstaller, cx_freeze, py2exe)
elif getattr(sys, "frozen", False):
runner = os.path.abspath(sys.executable)
arguments = sys.argv[1:]
# current_dir = os.path.dirname(runner)
logger.debug('Running elevator as Frozen with runner [%s]' % runner)
logger.debug('Arguments are %s' % arguments)
# If standard interpreter CPython is used
else:
runner = os.path.abspath(sys.executable)
arguments = [os.path.abspath(sys.argv[0])] + sys.argv[1:]
# current_dir = os.path.abspath(sys.argv[0])
logger.debug('Running elevator as CPython with runner [%s]' % runner)
logger.debug('Arguments are %s' % arguments)
if os.name == 'nt':
# Re-run the program with admin rights
# Join arguments and double quote each argument in order to prevent space separation
arguments = ' '.join('"' + arg + '"' for arg in arguments)
try:
# Old method using ctypes which does not wait for executable to exit nor deos get exit code
# See https://docs.microsoft.com/en-us/windows/desktop/api/shellapi/nf-shellapi-shellexecutew
# int 0 means SH_HIDE window, 1 is SW_SHOWNORMAL
# needs the following imports
# import ctypes
# ctypes.windll.shell32.ShellExecuteW(None, 'runas', runner, arguments, None, 0)
# Metthod with exit code that waits for executable to exit, needs the following imports
# import ctypes # In order to perform UAC check
# import win32event # monitor process
# import win32process # monitor process
# from win32com.shell.shell import ShellExecuteEx
# from win32com.shell import shellcon
childProcess = ShellExecuteEx(nShow=0, fMask=shellcon.SEE_MASK_NOCLOSEPROCESS,
lpVerb='runas', lpFile=runner, lpParameters=arguments)
procHandle = childProcess['hProcess']
obj = win32event.WaitForSingleObject(procHandle, -1)
exit_code = win32process.GetExitCodeProcess(procHandle)
logger.debug('Child exited with code: %s' % exit_code)
sys.exit(exit_code)
except Exception as e:
logger.info(e)
logger.debug('Trace', exc_info=True)
sys.exit(255)
# Linux runner and hopefully Unixes
else:
# Search for sudo executable in order to avoid using shell=True with subprocess
sudo_path = None
for path in os.environ.get('PATH', '').split(':'):
if os.path.isfile(os.path.join(path, 'sudo')):
sudo_path = os.path.join(path, 'sudo')
if sudo_path is None:
logger.error('Cannot find sudo executable. Cannot elevate privileges. Trying to run wihtout.')
main(sys.argv)
else:
command = 'sudo "%s"%s%s' % (
runner,
(' ' if len(arguments) > 0 else ''),
' '.join('"%s"' % argument for argument in arguments)
)
try:
output = subprocess.check_output(command, stderr=subprocess.STDOUT,
shell=False, universal_newlines=False)
output = output.decode('unicode_escape', errors='ignore')
logger.info('Child output: %s' % output)
sys.exit(0)
except subprocess.CalledProcessError as exc:
exit_code = exc.returncode
logger.error('Child exited with code: %s' % exit_code)
try:
output = exc.output.decode('unicode_escape', errors='ignore')
logger.error('Child outout: %s' % output)
except Exception as exc:
logger.debug(exc, exc_info=True)
sys.exit(exit_code)
自从您在 Linux 上工作以来，默认情况下会在 sudo 之前尝试图形提示。因此，您应该使用以下命令禁用图形提示：
elevate(graphical=False)
这个解决方案对我有用，而且非常简单。
我正在尝试编写一个 python 脚本，它会请求 root 权限。我曾尝试对 python 使用 elevate（它应该会显示一个对话框，要求输入 root 或“admin”密码），但是当我 运行 它时，它给出了“没有这样的文件或目录”错误。
import os
from elevate import elevate
def is_root():
return os.getuid() == 0
print("before ", is_root())
elevate()
print("after ", is_root())
为什么会这样？是否有任何使用系统 GUI 的可行替代方案？
编辑：
我在 Python 3.6 上使用 Kubuntu 18，但我希望它也能在 Windows 上运行。
进一步编辑：
这是一个关于对话框的问题（针对 basic/Windows 用户），而不是 TUI。
这是一个在 Windows 和 Linux 下工作的完整解决方案，可以将 UAC 或 sudo 提升到根目录，无论代码是用 Nuitka 解释、冻结还是编译都有效。
[编辑]
免责声明：此 post 中的代码已过时。
我已将提升代码作为 python 包发布。
使用 pip install command_runner
用法：
from command_runner.elevate import elevate
def main():
"""My main function that should be elevated"""
print("Who's the administrator, now ?")
if __name__ == '__main__':
elevate(main)
[/编辑]
代码主要检查它是否已经提升，如果是，运行s main() 函数，如果没有，它会生成一个提升的子进程，它将 运行 main() 函数。
希望对您有所帮助
import os
import sys
import subprocess
import logging
if os.name == 'nt':
try:
import ctypes
# import ctypes # In order to perform UAC check with ctypes.windll.shell32.ShellExecuteW()
import win32event # monitor process
import win32process # monitor process
from win32com.shell.shell import ShellExecuteEx
from win32com.shell import shellcon
except ImportError:
raise ImportError('Cannot import ctypes for checking admin privileges on Windows platform.')
logger = logging.getLogger(__name__)
def main():
# Your code goes here
# Keep in mind that elevating under windows will not redirect stdout/stderr to the main process
print('Hello, elevated world !')
def is_admin():
"""
Checks whether current program has administrative privileges in OS
Works with Windows XP SP2+ and most Unixes
:return: Boolean, True if admin privileges present
"""
current_os_name = os.name
# Works with XP SP2 +
if current_os_name == 'nt':
try:
return ctypes.windll.shell32.IsUserAnAdmin() == 1
except Exception:
raise EnvironmentError('Cannot check admin privileges')
elif current_os_name == 'posix':
# Check for root on Posix
return os.getuid() == 0
else:
raise EnvironmentError('OS does not seem to be supported for admin check. OS: %s' % current_os_name)
# Improved answer I have done in
if __name__ == '__main__':
if is_admin():
main(sys.argv)
else:
# UAC elevation / sudo code working for CPython, Nuitka >= 0.6.2, PyInstaller, PyExe, CxFreeze
# Regardless of the runner (CPython, Nuitka or frozen CPython), sys.argv[0] is the relative path to script,
# sys.argv[1] are the arguments
# The only exception being CPython on Windows where sys.argv[0] contains absolute path to script
# Regarless of OS, sys.executable will contain full path to python binary for CPython and Nuitka,
# and full path to frozen executable on frozen CPython
# Recapitulative table create with
# (CentOS 7x64 / Python 3.4 / Nuitka 0.6.1 / PyInstaller 3.4) and
# (Windows 10 x64 / Python 3.7x32 / Nuitka 0.6.2.10 / PyInstaller 3.4)
# --------------------------------------------------------------------------------------------------------------
# | OS | Variable | CPython | Nuitka | PyInstaller |
# |------------------------------------------------------------------------------------------------------------|
# | Lin | argv | ['./script.py', '-h'] | ['./test', '-h'] | ['./test.py', -h'] |
# | Lin | sys.executable | /usr/bin/python3.4 | /usr/bin/python3.4 | /absolute/path/to/test |
# | Win | argv | ['C:\Python\test.py', '-h'] | ['test', '-h'] | ['test', '-h'] |
# | Win | sys.executable | C:\Python\python.exe | C:\Python\Python.exe | C:\absolute\path\to\test.exe |
# --------------------------------------------------------------------------------------------------------------
# Nuitka 0.6.2 and newer define builtin __nuitka_binary_dir
# Nuitka does not set the frozen attribute on sys
# Nuitka < 0.6.2 can be detected in sloppy ways, ie if not sys.argv[0].endswith('.py') or len(sys.path) < 3
# Let's assume this will only be compiled with newer nuitka, and remove sloppy detections
try:
# Actual if statement not needed, but keeps code inspectors more happy
if __nuitka_binary_dir is not None:
is_nuitka_compiled = True
except NameError:
is_nuitka_compiled = False
if is_nuitka_compiled:
# On nuitka, sys.executable is the python binary, even if it does not exist in standalone,
# so we need to fill runner with sys.argv[0] absolute path
runner = os.path.abspath(sys.argv[0])
arguments = sys.argv[1:]
# current_dir = os.path.dirname(runner)
logger.debug('Running elevator as Nuitka with runner [%s]' % runner)
logger.debug('Arguments are %s' % arguments)
# If a freezer is used (PyInstaller, cx_freeze, py2exe)
elif getattr(sys, "frozen", False):
runner = os.path.abspath(sys.executable)
arguments = sys.argv[1:]
# current_dir = os.path.dirname(runner)
logger.debug('Running elevator as Frozen with runner [%s]' % runner)
logger.debug('Arguments are %s' % arguments)
# If standard interpreter CPython is used
else:
runner = os.path.abspath(sys.executable)
arguments = [os.path.abspath(sys.argv[0])] + sys.argv[1:]
# current_dir = os.path.abspath(sys.argv[0])
logger.debug('Running elevator as CPython with runner [%s]' % runner)
logger.debug('Arguments are %s' % arguments)
if os.name == 'nt':
# Re-run the program with admin rights
# Join arguments and double quote each argument in order to prevent space separation
arguments = ' '.join('"' + arg + '"' for arg in arguments)
try:
# Old method using ctypes which does not wait for executable to exit nor deos get exit code
# See https://docs.microsoft.com/en-us/windows/desktop/api/shellapi/nf-shellapi-shellexecutew
# int 0 means SH_HIDE window, 1 is SW_SHOWNORMAL
# needs the following imports
# import ctypes
# ctypes.windll.shell32.ShellExecuteW(None, 'runas', runner, arguments, None, 0)
# Metthod with exit code that waits for executable to exit, needs the following imports
# import ctypes # In order to perform UAC check
# import win32event # monitor process
# import win32process # monitor process
# from win32com.shell.shell import ShellExecuteEx
# from win32com.shell import shellcon
childProcess = ShellExecuteEx(nShow=0, fMask=shellcon.SEE_MASK_NOCLOSEPROCESS,
lpVerb='runas', lpFile=runner, lpParameters=arguments)
procHandle = childProcess['hProcess']
obj = win32event.WaitForSingleObject(procHandle, -1)
exit_code = win32process.GetExitCodeProcess(procHandle)
logger.debug('Child exited with code: %s' % exit_code)
sys.exit(exit_code)
except Exception as e:
logger.info(e)
logger.debug('Trace', exc_info=True)
sys.exit(255)
# Linux runner and hopefully Unixes
else:
# Search for sudo executable in order to avoid using shell=True with subprocess
sudo_path = None
for path in os.environ.get('PATH', '').split(':'):
if os.path.isfile(os.path.join(path, 'sudo')):
sudo_path = os.path.join(path, 'sudo')
if sudo_path is None:
logger.error('Cannot find sudo executable. Cannot elevate privileges. Trying to run wihtout.')
main(sys.argv)
else:
command = 'sudo "%s"%s%s' % (
runner,
(' ' if len(arguments) > 0 else ''),
' '.join('"%s"' % argument for argument in arguments)
)
try:
output = subprocess.check_output(command, stderr=subprocess.STDOUT,
shell=False, universal_newlines=False)
output = output.decode('unicode_escape', errors='ignore')
logger.info('Child output: %s' % output)
sys.exit(0)
except subprocess.CalledProcessError as exc:
exit_code = exc.returncode
logger.error('Child exited with code: %s' % exit_code)
try:
output = exc.output.decode('unicode_escape', errors='ignore')
logger.error('Child outout: %s' % output)
except Exception as exc:
logger.debug(exc, exc_info=True)
sys.exit(exit_code)
自从您在 Linux 上工作以来，默认情况下会在 sudo 之前尝试图形提示。因此，您应该使用以下命令禁用图形提示：
elevate(graphical=False)
这个解决方案对我有用，而且非常简单。