Why do I need `sudo` to run /usr/local/sbin/update-ngxblocker in root's crontab?

[spinitron]

In STEP 8 of this repo's main readme are instructions to run sudo crontab -e to edit root's crontab file and add a command to run update-ngxblocker. It provides a number of example crontab lines. Here's one

00 22 * * * sudo /usr/local/sbin/update-ngxblocker -e yourname@youremail.com

This is the root user's crontab file. Commands in it will run as root. Why does it use sudo to run the update-ngxblocker script?

[jwbjnwolf]

Again to answer as I did in your other issue #644

It needs root since the script updates the globalblacklist.conf blocklist and also those in bots.d when there's additions there which isn't common, which are configuration files in your Nginx folder. Root is needed here for this, since nothing but root and Nginx user should be accessing nginx folder. And along with reloading Nginx afterwards to apply the latest blocklist configuration.

[spinitron]

Understood but since it is in root's crontab, the command will in any case run as root without sudo.

[jwbjnwolf]

Ah yea of course it does no need to use sudo as root lol. 😅