---
title: please
section: 1
header: User Manual
footer: please 0.3.21
author: Ed Neville (ed-please@s5h.net)
date: 27 January 2021
---
# NAME
please - a tool for access elevation.
# SYNOPSIS
**please /bin/bash**
**pleaseedit /etc/fstab**
**pleaseedit [-r/\--reason \"new fs\"] /etc/fstab**
**please [-c/\--check] /etc/please.ini**
**please [-d/\--dir] [dir] command**
**please [-h/\--help]**
**please [-t/\--target] backup tar -cvf - /home/data | ...**
**please [-u/\--user] backup tar -cvf - /home/data | ...**
**please [-l/\--list]**
**please [-l/\--list] [-t/\--target user]**
**please [-n/\--noprompt] command**
**please [-r/\--reason \"sshd reconfigured, ticket 24365\"] /etc/init.d/ssh restart**
**please [-p/\--purge]**
**please [-w/\--warm]**
# DESCRIPTION
**please** and **pleaseedit** are a sudo clones that have regex support and a simple approach to ACL.
The aim is to allow admins to delegate accurate principle of least privilege access with ease. There are times when what is intended to be executed can be expressed easily with a regex to expose only what is needed and nothing more.
**pleaseedit** allows safe editing of files. The file is copied to /tmp, where it can be updated. When **EDITOR** exits cleanly the file is copied alongside the target and then renamed.
**-c**/**\--check file**
: will check the syntax of a **please.ini** config file. Exits non-zero on error
**-d**/**\--dir**
: will change directory to **dir** prior to executing the command
**-h**/**\--help**
: print help and exit
**-l**/**\--list**
: to list rules
**-n**/**\--noprompt**
: will not prompt for authentication and exits with a status of 1
**-p**/**\--purge**
: will purge your current authentication token for the running user
**-r**/**\--reason** **[reason]**
: will add **reason** to the system log
**-t**/**\--target** **[user]**
: to execute command as target **user**
**-u**/**\--user** **[user]**
: to execute command as target **user**
**-v**/**\--version**
: print version and exit
**-w**/**\--warm**
: will warm an authentication token and exit
# EXAMPLES
**please -t httpd /bin/bash**
: run a shell as the httpd user.
**please -l**
: to list what you may run.
**please -t username -l**
: to show what username may run. **username** must match the target regex in a **type=list** rule.
**please -r \"reloading httpd for ticket #123\" systemctl reload apache2**
: to show what username may run. **username** must match the target regex.
Please see **please.ini** for configuration examples.
# FILES
/etc/please.ini
# CONTRIBUTIONS
I welcome pull requests with open arms. New features always considered.
# BUGS
Found a bug? Please either open a ticket or send a pull request/patch.
# SEE ALSO
**please.ini**(5)