How can I grant access to Apache/PHP to use the nping -icmp command without putting the www user into the sudo group?

wh33t · 12-03-2022, 06:13 PM

Is it even possible?

What I want is to give PHP the ability to quickly ping it's own subnet to look for devices that may have gone offline recently. The best route I've discovered so far is using nping, but when I give it the -icmp flag it requires root power.

Any idea why this is and how I can get around it?

michaelk · 12-03-2022, 06:54 PM

If you have a fixed list of addresses or hostnames I would go with using fping.

wh33t · 12-03-2022, 07:15 PM

Quote:

Originally Posted by michaelk

If you have a fixed list of addresses or hostnames I would go with using fping.

I'll give it a go!

elgrandeperro · 12-04-2022, 09:21 AM

You can use sudo to restrict the user to a single command, not give them full sudo. There are plenty of examples of this.

Here is one:

https://kifarunix.com/run-only-speci...sudo-in-linux/

Obviously, you will add sudo to the command and no password.