Hi everyone,

I have a Python program (A) that run under a regular user account. (good)

When some events occur in (A) I need to modify my nftables and only the root is allowed to do so.

I’ve come up with 3 ways to do that (if you know other please share) but I don’t which would be the best.

1. Make a sudo call from (A) with from subprocess import run but I will need to store the password ! and I don’t think is possible to keep it encrypted and decrypted when need it (it’s a flaw)
   .
2. Make (A) writing a file with the requests. Create a (B) daemon (that run as root) that check that file every X and do the necessary
   .
3. Make (A) do an IPC ( Linux socket ) to (B) daemon (that run as root) and does the necessary.

I suppose that the solution 2 is less heavy that the 3 ? But if I’m not mistaken it will react also slower ?

Thanks.

🐧