Disallow running brew cask as root.

[reitermarkus]

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same change?
• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your changes? Here's an example.
• Have you successfully run brew tests with your changes locally?

---

As discussed in #1452.

[MikeMcQuaid]

Once tests are 💚 🚢

[bcg62]

This breaks a lot of CM tools like chef/puppet that function with out having a tty available for a user to enter a password.

Theres been a lot of back and fourth about this it seems and I'm still not sure what the correct solution is, could someone point me in the right direction?

Homebrew/homebrew-cask#5667
Homebrew/homebrew-cask#19180 (comment)

[reitermarkus]

@bcg62, see #1452 (comment). Basically there are two “solutions”: Either run a sudo keep-alive loop or add the current user to /etc/sudoers for the duration of the script.

[bcg62]

thanks @reitermarkus

This seems fine for some simple bash scripting but when trying to do something similar in a real CM tool its very intrusive and dangerous to modify sudo on the fly to preform an action, or do something like a keep alive in the background. Its also a broader discussion for the tool responsible referenced above.

[reitermarkus]

Ok, I just read through the two discussions you linked above, and it seems like adding support for SUDO_ASKPASS is pretty trivial, so this could be a third option.

[bcg62]

Thanks, would you be able to share your example?

[reitermarkus]

First you will have to save your askpass-script to /path/to/script.

Then you can either do this

SUDO_ASKPASS="/path/to/script" brew cask install cask-which-requires-sudo

or this

export SUDO_ASKPASS="/path/to/script"
brew cask install cask-which-requires-sudo
brew cask install another-cask-which-requires-sudo