sudo

Documentation

Overview

Package sudo is policy-free plumbing for driving an interactive sudo over an ssh transport without either (a) carrying a password

Index

• Variables
• func PasswordRequired(stderr string) bool
• func ReadPassword(prompt string) ([]byte, error)
• func Zero(b []byte)

Variables

var ErrNoTTY = errors.New("sudo: no controlling tty; cannot prompt for password")

ErrNoTTY is returned by ReadPassword when /dev/tty cannot be opened. CI and headless invocations should fail fast on this rather than hang

Functions

func PasswordRequired

func PasswordRequired(stderr string) bool

PasswordRequired returns true when stderr from a `sudo -n` attempt indicates the failure was "password needed" rather than a genuine

func ReadPassword

func ReadPassword(prompt string) ([]byte, error)

ReadPassword prompts on /dev/tty (NOT stdin, which the caller will reuse to pipe the password into the remote sudo) and returns the

func Zero

func Zero(b []byte)

Zero overwrites b in place. Use with `defer` after a successful ReadPassword to keep the password-bearing buffer alive only as long