raou/README.md

49 行
1.6 KiB
Markdown

2018-10-05 19:09:23 +02:00
raou
====
raou is a lightweight sudo-like tool for Linux. It allows a user to
execute programs as another user without entering the password. However,
the programs (including the parameters) a user can run are explicitly
specified by the administrator.
Originally written in C, it's now reimplemented in Rust.
By default, raou looks in /etc/raou.d/ for config files. If you run
"raou backup", it will look for /etc/raou.d/backup.
Example config file:
2019-08-11 12:18:15 +02:00
```
2018-10-05 19:09:23 +02:00
user john
target_user root
path /usr/local/bin/script.sh
2019-08-11 12:18:15 +02:00
```
2018-10-05 19:09:23 +02:00
2019-08-11 12:18:15 +02:00
**user** is the name of the user who you want to give permissions to
execute **path** as the **target_user**.
2018-10-05 19:09:23 +02:00
2019-08-11 12:18:15 +02:00
**path** must contain the absolute path.
2018-10-05 19:09:23 +02:00
Optional fields
---------------
2019-08-11 12:18:15 +02:00
**args**: If you want to leave out optional arguments (argv) to *path*,
2018-10-05 19:09:23 +02:00
simply don't include this. Otherwise, simply specify them
2019-08-11 12:18:15 +02:00
```
...
2018-10-05 19:09:23 +02:00
args -v -ltr
2019-08-11 12:18:15 +02:00
```
**allow_args**: Allow arbitrary arguments, so:
```
2018-10-05 19:09:23 +02:00
raou backup /path
2019-08-11 12:18:15 +02:00
```
2018-10-05 19:09:23 +02:00
2019-08-11 12:18:15 +02:00
Will launch "path" as specified in the file for the backup entry with "/path" as argv[1] instead of the argument specified with "args" in the config file.
2018-10-05 19:09:23 +02:00
2019-08-11 12:18:15 +02:00
**no_new_privs**: Defaults to 1. Processes launched with this option active
2018-10-05 19:09:23 +02:00
won't be able to gain more privileges, even when they call setuid programs.
2019-08-11 12:18:15 +02:00
**env_vars**: A comma-separated list of environment variables to inherit
2018-10-05 19:09:23 +02:00
from the current environment. Everything else will be wiped (but others
like HOME, SHELL etc. will be appropriately set).
2019-08-11 12:18:15 +02:00
**argv0**: Set this option if you want to provide your own value as "argv0"
2018-10-05 19:09:23 +02:00
The default is the name of the launched binary (not the whole path).