please(1)

πŸ“¦
version 0.5.6 Β· 4 versions
, in debian trixie, fedora 43, fedora 44, ubuntu questing, ubuntu resolute, ubuntu stonking

πŸ’– please(1) β€” the access elevation bestie πŸ’–

okay so. bestie. let me tell you about please and pleaseedit, from the User Manual. this is the manual page for please(1) and it's lowkey one of my faves. sit down, grab a strawberry πŸ“, we're doing this.


✨ NAME ✨

please β€” a tool for access elevation. that's it. that's the whole vibe. πŸ‘‘


πŸ¦‹ SYNOPSIS πŸ¦‹

here's every single way you can call it, exactly as written, no cap:

please /bin/bash

pleaseedit /etc/fstab

pleaseedit [-r/--reason "new fs"] /etc/fstab

pleaseedit [-g/--group groupname] filename

pleaseedit [-t/--target username] filename

pleaseedit [--resume] filename

please [-a/--allowenv list]

please [-c/--check] /etc/please.ini

please [-d/--dir directory] command

please [-e/--env environment] command

please [-g/--group groupname] command

please [-h/--help]

please [-t/--target username] backup tar -cvf - /home/data | ...

please [-u/--user username] backup tar -cvf - /home/data | ...

please [-l/--list]

please [-l/--list] [-t/--target username]

please [-l/--list] [-u/--user username]

please [-n/--noprompt] command

please [-r/--reason "sshd reconfigured, ticket 24365"] /etc/init.d/ssh
restart

please [-p/--purge]

please [-w/--warm]

look at that list. it's giving versatile. πŸ’…


🌸 DESCRIPTION 🌸

okay so here's the tea, fr fr. please and pleaseedit are sudo alternatives that have regex support and a simple approach to ACL. that's the whole personality. πŸŽ€

the aim is to let admins delegate accurate principle of least privilege access with ease. please.ini allows for very specific and flexible regex defined permissions. so like, you get exactly the permissions you need and not one crumb more. obsessed. 😌

pleaseedit adds a layer of safety to editing files. here's how it goes down:

  1. the file is copied to /tmp, where it can be updated 🫢
  2. when EDITOR exits cleanly the file is copied alongside the target 🌈
  3. the file will then be renamed over the original, but if an exitcmd is configured it must exit cleanly first ⚠️
  4. resume will continue editing when exitcmd fails πŸ’–

periodt.


πŸ‘‘ OPTIONS πŸ‘‘

every single one, bestie. no skipping. ✨

  • -a/--allowenv list β€” allow environments separated by , to be passed through 🌱
  • -c/--check file β€” will check the syntax of a please.ini config file. exits non-zero on error 🚨
  • -d/--dir β€” will change directory to dir prior to executing the command πŸ“‚
  • -g/--group groupname β€” run or edit as groupname πŸ‘₯
  • -h/--help β€” print help and exit πŸ†˜
  • -l/--list β€” to list rules πŸ“‹
  • -n/--noprompt β€” will not prompt for authentication and exits with a status of 1 🀐
  • -p/--purge β€” will purge your current authentication token for the running user 🧹
  • -r/--reason [reason] β€” will add reason to the system log πŸ“
  • -t/--target [username] β€” to execute command, or edit as target username 🎯
  • -u/--user [username] β€” to execute command, or edit as target username 🎯
  • -v/--version β€” print version and exit 🏷️
  • -w/--warm β€” will warm an authentication token and exit πŸ”₯

🌈 EXAMPLE USAGE 🌈

this is the part where it all clicks, iykyk:

  • please -t httpd /bin/bash β€” run a shell as the httpd user 🐚
  • please -l β€” to list what you may run πŸ“œ
  • please -t "username" -l β€” to show what username may run. username must match the target regex in a type=list rule πŸ‘€
  • please -r 'reloading apache2, change #123' systemctl reload apache2 β€” to reload apache2 with a reason πŸ’«
  • pleaseedit -r 'adding new storage, ticket #24365' /etc/fstab β€” to use pleaseedit to modify fstab πŸ› οΈ

and then, the plot twist: please see please.ini for configuration examples. πŸ“–


πŸŽ€ FILES πŸŽ€

  • /etc/please.ini

that's the one, bestie. that's where the magic lives. ✨


🫢 CONTRIBUTIONS 🫢

"I welcome pull requests with open arms. New features always considered."

literally so welcoming. the main character energy is immaculate. πŸ’œ


πŸ’€ BUGS πŸ’€

found a bug? please either open a ticket or send a pull request/patch. we don't gatekeep fixes around here. πŸ™ˆ


⭐ SEE ALSO ⭐

go read it, it's the prequel. πŸ¦‹


πŸ‘‘ AUTHORS πŸ‘‘

Ed Neville (ed-please@s5h.net). a legend, no cap. 🌟


and that's the whole manual, bestie!! remember: every flag, every default, every path β€” kept exactly as-is, because facts are facts and the vibe is just the wrapper. πŸ’–

okay and before i go, the cute lil sign-off at the bottom said this was please version 0.5.6, dated 06 September 2024, and it's page please(1) from the User Manual. slay, happy elevating, mwah πŸ’…πŸ’–

πŸ“¦ where this page comes from