A set of scripts and a library call wrapper to secure things granted by sudo.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
Emiel Kollof 3e711fca92
testcase and style fixing
8 years ago
libwrapper testcase and style fixing 8 years ago
scripts testcase and style fixing 8 years ago
LICENSE Fix license. :P 12 years ago
README Minor edits 12 years ago
TODO Many shells implement their own getenv/setenv/putenv that mess with **environ themselves. Of course, my wrapper will not wrap those calls, since they are outside of the scope. 12 years ago
install.sh added execve(), which defaults to reject, unless it's allowed of course. This should 12 years ago

README


The sudowrapper suite, by Emiel Kollof <coolvibe@hackerheaven.org>

The sudowrapper suite consists of a set of scripts that will securely let
user do certain tasks as a priviledged user, and even resort to stubbed/
modified library calls to enforce security.

REQUIREMENTS:

A unix system with a perl interpreter (which should be fairly common) and
a Bourne compatible shell. It would be nice if your system supported
mechanisms like LD_PRELOAD, but it's not required. Where the wrapper is
not available, the scripts will try to drop privs when sensible.