How do you execute a command as a different user in a shell script?

In shell scripts, executing commands as different users can be achieved through several methods:

1. Using the su Command

The su (switch user) command allows you to execute commands as another user. Typically, when executing su, the system prompts for the target user's password. However, in shell scripts, we often prefer commands to run automatically.

Example:

bash
su -l username -c 'command'

Here, the -l option simulates a full login session, and -c specifies the command to execute.

2. Using the sudo Command

The sudo command allows authorized users to execute commands as another user, commonly used to grant administrative privileges. When using sudo, you can configure the /etc/sudoers file to execute commands without a password.

Example:

bash
sudo -u username command

Here, the -u option is followed by the target user.

Configuring Passwordless sudo

Edit the /etc/sudoers file (safely using the visudo command):

bash
username ALL=(ALL) NOPASSWD: ALL

This configuration allows the specified user to execute all commands without a password.

3. Using the runuser Command

runuser is similar to su but is designed specifically for system services and scripts, without requiring a password.

Example:

bash
runuser -l username -c 'command'

Practical Application Example

Suppose you need to run a backup script as the backup user in your script; you can write it as:

bash
#!/bin/bash

# Execute backup command using sudo
sudo -u backup /path/to/backup/script.sh

# Or using su
su -l backup -c '/path/to/backup/script.sh'

# Or using runuser
runuser -l backup -c '/path/to/backup/script.sh'

In practical applications, the choice depends on the specific system environment, security policies, and script requirements. Typically, for system automation scripts, it is recommended to use sudo or runuser as they facilitate easier permission management and configuration.