Or copy them to the clipboard: ~ $ pass -c Email/Ĭopied to clipboard. We can list all the existing passwords in the store: ~ $ passĪnd we can show passwords too: ~ $ pass Email/ The pass command is extensively documented in its man page. The very active community has produced many impressive clients and GUIs for other platforms as well as extensions for pass itself. There is bash completion so that you can simply hit tab to fill in names and commands, as well as completion for zsh and fish available in the completion folder. There are no funky file formats or new paradigms to learn. You can edit the password store using ordinary unix shell commands alongside the pass command. It's capable of temporarily putting passwords on your clipboard and tracking password changes using git. It is a very short and simple shell script. All passwords live in ~/.password-store, and pass provides some nice commands for adding, editing, generating, and retrieving passwords. Pass makes managing these individual password files extremely easy. These encrypted files may be organized into meaningful folder hierarchies, copied from computer to computer, and, in general, manipulated using standard command line file management utilities. With pass, each password lives inside of a gpg encrypted file whose filename is the title of the website or resource that requires the password. If you want neither to enter another account's password, nor give your regular account sudoers permissions, you're pretty much out of options unless you consider SSH with key authentication or something like that.Password management should be simple and follow Unix philosophy. You can su to another user account (using the other user account's password), and sudo from there, provided that other account is a sudoer. In GNU coreutils su, there's an actual -c command argument to su that can be placed before the user name. This works by passing all arguments after the user name to the destination account's login shell. If you use su instead, you can enter the destination account's password and execute a command using that user's privileges.

Su requires the password of the target account ( root by default, but root account has no password on OS X by default).

Sudo always requires the executing user's password (and requires that you have specific permissions to do this, i.e. I have enabled the root user under Mac OS X 10.7. Privileges AND has access to the files of the 'logged in (normal) user' withoutĪdding the normal user to the sudoers file? TL DR: How do I execute any command that requires admin With the privileges of root and therefore it asks also for the password of root. My expectation is that sudo -u root some_command executes some_command To indicate that the -u username option doesn't work the way I expect it to It only accepts the password of the 'normal' user which seems It doesn't accept the password for root (or admin if I try with my normalĪdmin user). In my understanding sudo -u root should do the trick – however Now I try to execute a command that needs admin/root privileges and also access to directories of my normal user – therefore I am not able This 'normal' user is not in the sudoers file (and shouldnt be, in my opinion). I am logged in on a terminal as an non-admin/non-root user.

Macos sudo without password