Dropping Root Permissions In Python

by

You won’t be able to open a server on port 80 without root privileges, this is a restriction on the OS level. So the only solution is to drop root privileges after you have opened the port.

Here is a possible solution to drop root privileges in Python: Dropping privileges in Python. This is a good solution in general, but you’ll also have to add os.setgroups([]) to the function to ensure that the group membership of the root user is not retained.

I copied and cleaned up the code a little bit, and removed logging and the exception handlers so it is left up to you to handle OSError properly (it will be thrown when the process is not allowed to switch its effective UID or GID):

import os, pwd, grp

def drop_privileges(uid_name="nobody", gid_name="nogroup"):
    if os.getuid() != 0:
        # We're not root so, like, whatever dude
        return

    # Get the uid/gid from the name
    running_uid = pwd.getpwnam(uid_name).pw_uid
    running_gid = grp.getgrnam(gid_name).gr_gid

    # Remove group privileges
    os.setgroups([])

    # Try setting the new uid/gid
    os.setgid(running_gid)
    os.setuid(running_uid)

    # Ensure a very conservative umask
    old_umask = os.umask(077)

More Related Contents:

  1. How do I run Selenium in Xvfb?
  2. What is the simplest way to SSH using Python?
  3. Python spawn off a child subprocess, detach, and exit
  4. How do you set your pythonpath in an already-created virtualenv?
  5. In Python script, how do I set PYTHONPATH?
  6. How to make a python, command-line program autocomplete arbitrary things NOT interpreter
  7. How to split a huge csv file based on content of first column?
  8. Fetching the output of a command executed through os.system() command [duplicate]
  9. How to use “/” (directory separator) in both Linux and Windows in Python?
  10. When using os.execlp, why `python` needs `python` as argv[0]
  11. how to find the owner of a file or directory in python
  12. How to find the mountpoint a file resides on?
  13. Sub-process in Python execute two task? [closed]
  14. How to control the source IP address of a ZeroMQ packet on a machine with multiple IPs?
  15. UnicodeDecodeError: ‘utf8’ codec can’t decode byte 0x9c
  16. How can I use a Python script in the command line without cd-ing to its directory? Is it the PYTHONPATH?
  17. using pip3: module “importlib._bootstrap” has no attribute “SourceFileLoader”
  18. Compare two images the python/linux way
  19. Packaging a Python script on Linux into a Windows executable
  20. How to kill a python child process created with subprocess.check_output() when the parent dies?
  21. How would I build python myself from source code on Ubuntu?
  22. Change default Python version from 2.4 to 2.6
  23. Splitting out the output of ps using Python
  24. Sending a password over SSH or SCP with subprocess.Popen
  25. Show matplotlib plots (and other GUI) in Ubuntu (WSL1 & WSL2)
  26. Uninstall python built from source?
  27. PYTHONPATH not working for sudo on GNU/Linux (works for root)
  28. Pip is not working for Python 3.10 on Ubuntu
  29. Determining Whether a Directory is Writeable
  30. How to install and import Python modules at runtime

Leave a Comment