4

SC2117

Joachim Ansorg edited this page 2021-11-12 19:35:22 +01:00

Table of Contents

• To run commands as another user, use su -c or sudo.
• Problematic code:
• Correct code:
• Rationale:
• Exceptions

To run commands as another user, use su -c or sudo.

Problematic code:

whoami
su
whoami

Correct code:

whoami
sudo whoami

Rationale:

It's commonly believed that su makes a session run as another user. In reality, it starts an entirely new shell, independent of the one currently running your script.

su; whoami will start a root shell and wait for it to exit before running whoami. It will not start a root shell and then proceed to run whoami in it.

To run commands as another user, use sudo some command or su -c 'some command'. sudo is preferred when available, as it doesn't require additional quoting and can be configured to run passwordless if desired.

Exceptions

If you're aware of the above and want to e.g. start an interactive shell for a user, feel free to ignore this message.

ShellCheck

• Installation

  • CentOS6
  • More Installation Guides

• Usage

  • Directive
  • Ignore

• Integrating and extending

  • Misc. contributions
  • Azure Pipelines
  • Buildkite
  • CircleCI
  • DevGuide
  • Integration
  • JUnit
  • Phabricator
  • TravisCI
  • GitLab CI
  • Drone
  • GitHub Actions

• Severity

• Template

Each individual ShellCheck warning has its own wiki page like SC1000. Use GitHub Wiki's "Pages" feature above to find a specific one, or see Checks.