Skip to main content
Solved

Do commands run as root or as the management user?

  • June 17, 2013
  • 6 replies
  • 66 views

boberito
Forum|alt.badge.img+22

I'm wondering if I need to run commands that need full root access, do I need to do it with sudo or if they actually run as root when ran with a policy? Probably an easy question.

Best answer by Fink

Hi

Polices are run as root. The two instances when we use the management user are Casper Remote and Self Serivce. Casper Remote uses that account to SSH into the computer. Self Service also uses that account to escalate the current user to an admin user in order to install software.

Hope this helps!

6 replies

talkingmoose
Forum|alt.badge.img+36
  • Community Manager
  • June 17, 2013

Policies are executed by the administrative account that Casper is using to manage the Mac. Effectively, any commands are run with elevated privileges. No need to use "sudo".


Forum|alt.badge.img+16
  • Employee
  • Answer
  • June 17, 2013

Hi

Polices are run as root. The two instances when we use the management user are Casper Remote and Self Serivce. Casper Remote uses that account to SSH into the computer. Self Service also uses that account to escalate the current user to an admin user in order to install software.

Hope this helps!


Forum|alt.badge.img+18
  • Contributor
  • June 17, 2013

Not even is there no need to use sudo, you should not do so in your scripts, for security reasons.


boberito
Forum|alt.badge.img+22
  • Author
  • Jamf Heroes
  • June 21, 2013

Thanks Fink! That's exactly what I was wondering and it answered it perfectly.


Forum|alt.badge.img+13
  • Valued Contributor
  • August 7, 2014

Not even is there no need to use sudo, you should not do so in your scripts, for security reasons


Mate, Many thanks for that 1 line of info....

Saved me a pile of isuues... Removing Sudo from my scripts sorted a multitude of self service issues....

CHEERS!


Forum|alt.badge.img+13
  • Valued Contributor
  • August 7, 2014

Now, If only I wasn't receiving so much Spam emails after my Jamf nation account was hacked... I'd be over the moon :-0