do shell script as Root

Question

Level 1

104 points

do shell script as Root

I have developer tools loaded on my Powerbook and want to turn nap off at start up (avoid the annoying hiss).
I created this script which runs in a terminal but not as a script because I do not know how to enter the root password automatically.

do shell script "hwprefs cpu_nap=false"

This returns message you need to be root so I added

do shell script "sudo hwprefs cpu_nap=false"

But am not sure how to add the password after that.

Thanks for any suggestions

Posted on Nov 3, 2005 9:37 PM

Reply

Answer 1

Niel

Level 10

726,749 points

Nov 3, 2005 9:44 PM in response to MikeR

Here:

do shell script "hwprefs cpu_nap=false" with administrator privileges password "password"

Using 'with administrator privileges' will cause the command to execute as if root invoked it.

(9383)

Reply

Answer 2

MikeR Author

Level 1

104 points

Nov 3, 2005 9:51 PM in response to Niel

Beautiful that worked thank you Neil

Reply

Answer 3

Nov 4, 2005 7:07 AM in response to MikeR

Just to add to the above post... If you don't want to hard code the admin password into your script you can just do:

do shell script "hwprefs cpu_nap=false" with administrator privileges

(ie keep "with administrator privileges" but omit the password) and AppleScript will prompt you for the password at runtime.

Steve

Reply

Answer 4

biovizier

Level 5

7,925 points

Nov 4, 2005 11:33 AM in response to Steve Herman1

In addition to the warning about including the "admin" password (which will be stored in plain text) in the script, remeber that when a "do shell script ... with administrator privileges" command is run, it uses the method whereby the password is "echoed" and piped to 'sudo -S' which some people consider to be insecure. It potentially allows another user to see the password in plain text with a well timed 'ps -ax' command (at least it does in 10.3.9).

Reply

Answer 5

Camelot

Level 9

54,333 points

Nov 4, 2005 2:10 PM in response to biovizier

it uses the method whereby the password is "echoed" and piped to 'sudo -S'

This was changed in later versions of the OS. I'm not exactly sure when the change was made, but it isn't the case on the latest versions of 10.4

Reply

Answer 6

biovizier

Level 5

7,925 points

Nov 4, 2005 2:28 PM in response to Camelot

This was changed in later versions of the OS. I'm not exactly sure when the change was made, but it isn't the case on the latest versions of 10.4

Thanks for this information - I'm relieved to hear it!

I only wish they would include these types of security enhancements for versions of the OS prior to the current one for users such as me and the original poster who are still on 10.3, which was still on sale as recently as eight months ago after all...

Reply

Answer 7

Nov 4, 2005 2:48 PM in response to biovizier

This may have been a fix that was part of AppleScript in 10.4 but If it was released as part of a Security Update then it should've been included in a 10.3.9 security update as well.

I think Apple's policy (although it may be an "unofficial" policy) is to release security updates for the latest current version of the OS and the last release of the previous version of the OS. So 10.3.9 should continue to receive security updates until 10.5 comes out.

Steve

Reply