1please(1)                         User Manual                        please(1)
2
3
4

NAME

6       please - a tool for access elevation.
7

SYNOPSIS

9       please /bin/bash
10
11       pleaseedit /etc/fstab
12
13       pleaseedit [-r/--reason "new fs"] /etc/fstab
14
15       please [-a/--allowenv list]
16
17       please [-c/--check] /etc/please.ini
18
19       please [-d/--dir directory] command
20
21       please [-h/--help]
22
23       please [-t/--target username] backup tar -cvf - /home/data | ...
24
25       please [-u/--user username] backup tar -cvf - /home/data | ...
26
27       please [-l/--list]
28
29       please [-l/--list] [-t/--target username]
30
31       please [-l/--list] [-u/--user username]
32
33       please [-n/--noprompt] command
34
35       please  [-r/--reason "sshd reconfigured, ticket 24365"] /etc/init.d/ssh
36       restart
37
38       please [-p/--purge]
39
40       please [-w/--warm]
41

DESCRIPTION

43       please and pleaseedit are sudo alternatives that have regex support and
44       a simple approach to ACL.
45
46       The  aim  is  to  allow  admins to delegate accurate principle of least
47       privilege access with ease.  please.ini allows for  very  specific  and
48       flexible regex defined permissions.
49
50       pleaseedit adds a layer of safety to editing files.  The file is copied
51       to /tmp, where it can be updated.  When EDITOR exits cleanly  the  file
52       is  copied alongside the target, the file will then be renamed over the
53       original, but if a exitcmd is configured it must exit cleanly first.
54
55       -a/--allowenv list
56              allow environments separated by , to be passed through
57
58       -c/--check file
59              will check the syntax of a please.ini config file.   Exits  non-
60              zero on error
61
62       -d/--dir
63              will change directory to dir prior to executing the command
64
65       -h/--help
66              print help and exit
67
68       -l/--list
69              to list rules
70
71       -n/--noprompt
72              will not prompt for authentication and exits with a status of 1
73
74       -p/--purge
75              will purge your current authentication token for the running us‐
76              er
77
78       -r/--reason [reason]
79              will add reason to the system log
80
81       -t/--target [username]
82              to execute command, or edit as target username
83
84       -u/--user [username]
85              to execute command, or edit as target username
86
87       -v/--version
88              print version and exit
89
90       -w/--warm
91              will warm an authentication token and exit
92

EXAMPLE USAGE

94       please -t httpd /bin/bash
95              run a shell as the httpd user
96
97       please -l
98              to list what you may run
99
100       please -t "username" -l
101              to show what username may run.  username must match  the  target
102              regex in a type=list rule
103
104       please -r 'reloading apache2, change #123' systemctl reload apache2
105              to reload apache2 with a reason
106
107       pleaseedit -r 'adding new storage, ticket #24365' /etc/fstab
108              to use pleaseedit to modify fstab
109
110       Please see please.ini for configuration examples.
111

FILES

113       /etc/please.ini
114

CONTRIBUTIONS

116       I  welcome  pull  requests with open arms.  New features always consid‐
117       ered.
118

BUGS

120       Found a bug?  Please either open a ticket or send a pull request/patch.
121

SEE ALSO

123       please.ini(5)
124

AUTHORS

126       Ed Neville (ed-please@s5h.net).
127
128
129
130please 0.5.0                   07 November 2021                      please(1)
Impressum