# 2.2 Running Command as Root

Make sure you are logged into your machine! You will practice changing users and becoming root.

We are going to check the charachteristics of our current user we do this with the command id
```bash
id
```

The output should look similiar to this:
```bash
[greater@rhcsa ~]$ id
uid=1001(greater) gid=1001(greater) groups=1001(greater),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
```

We can see that we are logged in as greater the UID (user id) and the GID (group id) as numbers and perhaps even additional groups.

We can also check variables of the specific home directory.
```bash
echo $HOME
```
This command shows the path to the users home directory.

Output would look like this:
```bash
[greater@rhcsa ~]$ echo $HOME
/home/greater
```

And where our environment searches for executable files just like path of windows.
```bash
echo $PATH
```

Output example:
```bash
[greater@rhcsa ~]$ echo $PATH
/usr/local/bin:/bin:/usr/bin:/usr/local/sbin:/usr/sbin:/home/greater/.local/bin:/home/greater/bin
```

Let's switch to root with the su (switch user) command.
```bash
su
```

If you want to go to the home directory of the user you are switching to add the - to the command.
```bash
su -
```

Fill in the root password this should be "greater" on all machines.
You should now be logged in as root
```bash
[root@rhcsa ~]#
```

Check the environment variables again.
```bash
id
echo $HOME
echo $PATH
```
Notice the diffrences on uid/gid the home directory and path settings.

Let's return to the previous user you were logged into by typing the exit command.
```bash
exit
```
```bash
[greater@rhcsa ~]$
```

Notice that the end of the bash line changed from $ to # and back again.
- $ means you are logged in as a user
- \# means you are logged in as root

Let's attempt to run a tail command on the /var/log/messages file to see the end of the file, and lets use -5 to only display the last 5 lines of this file.
```bash
tail -5 /var/log/messages
```

The result should be similiar to this:
```bash
[greater@rhcsa ~]$ tail -5 /var/log/messages
tail: cannot open ‘/var/log/messages’ for reading: Permission denied
```

Let's try now with the sudo command.
```bash
sudo tail -5 /var/log/messages
```
Now you should see the lines!!

Let's copy a file.
```bash
cp /etc/rootfile /etc/rootfileOLD
```

You should be getting an error like this:
```bash
[greater@rhcsa~]$ cp /etc/rootfile /etc/rootfileOLD
cp: cannot create regular file '/etc/rootfileOLD': Permission denied
```

With the sudo command we can copy the file!
```bash
sudo cp /etc/rootfile /etc/rootfileOLD
```

Now to remove the file
```bash
rm /etc/rootfileOLD
```

You should be getting an error like this:
```bash
[greater@rhcsa~]$ rm /etc/rootfileOLD 
rm: remove write-protected regular empty file '/etc/rootfileOLD'? y
rm: cannot remove '/etc/rootfileOLD': Permission denied
```

Of course we can use sudo again to remove the file:
```bash
sudo rm /etc/rootfileOLD
```

Let's edit a configuration file in /etc/
```bash
echo "Welcome to Class" | tee -a /etc/rootfile
```

The permission error should be shown again:
```bash
[greater@rhcsa~]$ echo "Welcome to Class" >> /etc/rootfile 
-bash: /etc/rootfile: Permission denied
```

With sudo we can again get things done.
```bash
echo "Welcome to Class" | sudo tee -a /etc/rootfile
```

Check if the text was added to the file.
```bash
[greater@rhcsa~]$ sudo vim /etc/rootfile
```

The sudo commando is used to execute commandos as if you were the root user, but it does not require you to be the root user. This is called priviledge escalation.

[![sandwich.png](https://imgs.xkcd.com/comics/sandwich.png)](https://imgs.xkcd.com/comics/sandwich.png)