privexec, branch privexec a fail-secure replacement for sudo https://src.kaivo.net/security/privexec/atom/?h=privexec 2021-02-18T17:58:54Z implement full precedence rules 2021-02-18T17:58:54Z Jakob Kaivo jkk@ung.org 2021-02-18T17:58:54Z urn:sha1:757c0bd92bd777c47e23281ad814f3e28bde3498 correct keyword authorized -> authorize 2021-02-18T17:19:57Z Jakob Kaivo jkk@ung.org 2021-02-18T17:19:57Z urn:sha1:c941b923b44dc9092c835fad1a480155bf512d42 add logging for permission checks and results 2021-02-18T17:16:37Z Jakob Kaivo jkk@ung.org 2021-02-18T17:16:37Z urn:sha1:3dfe8bd2c04f0f81d149186e17ab526cf6b8773b use separate group for check 2021-02-18T16:57:05Z Jakob Kaivo jkk@ung.org 2021-02-18T16:57:05Z urn:sha1:29037b8e6e476ab05cd7fa87544b12f8f10ebe34 remove need to localize logging 2021-02-18T16:29:56Z Jakob Kaivo jkk@ung.org 2021-02-18T16:29:56Z urn:sha1:f2c14509956a2c186b243b55df1752e49657e536 set gid to 0 for execution 2021-02-18T16:27:49Z Jakob Kaivo jkk@ung.org 2021-02-18T16:27:49Z urn:sha1:4b12f8018e6d7e73f92b742ee42c27495fbbca5a add logging of user and command when executed 2021-02-18T16:18:49Z Jakob Kaivo jkk@ung.org 2021-02-18T16:18:49Z urn:sha1:48ce6ddfde98185060510a021cde369933246191 add full precedence list 2021-02-07T18:57:26Z Jakob Kaivo jkk@ung.org 2021-02-07T18:57:26Z urn:sha1:72f77b8941d9a7cd3f625938c704c1e6c1dd75f3 begin paper with abstract and outline 2021-02-07T18:47:26Z Jakob Kaivo jkk@ung.org 2021-02-07T18:47:26Z urn:sha1:5e74f5da46dd78a239a2af7c8a71041f2c480d80 call setuid() so things like apt work properly 2021-02-07T18:29:21Z Jakob Kaivo jkk@ung.org 2021-02-07T18:29:21Z urn:sha1:e1a48622522776f8f80b119f6d3e5bb604b601a5