added README
This commit is contained in:
		
							
								
								
									
										45
									
								
								README.md
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										45
									
								
								README.md
									
									
									
									
									
										Normal file
									
								
							| @@ -0,0 +1,45 @@ | |||||||
|  | raou | ||||||
|  | ==== | ||||||
|  | raou is a lightweight sudo-like tool for Linux. It allows a user to  | ||||||
|  | execute programs as another user without entering the password. However, | ||||||
|  | the programs (including the parameters) a user can run are explicitly | ||||||
|  | specified by the administrator. | ||||||
|  |  | ||||||
|  | Originally written in C, it's now reimplemented in Rust. | ||||||
|  |  | ||||||
|  | By default, raou looks in  /etc/raou.d/ for config files. If you run | ||||||
|  | "raou backup", it will look for /etc/raou.d/backup. | ||||||
|  |  | ||||||
|  | Example config file: | ||||||
|  |  | ||||||
|  | user john | ||||||
|  | target_user root | ||||||
|  | path /usr/local/bin/script.sh | ||||||
|  |  | ||||||
|  |  | ||||||
|  | *user* is the name of the user who you want to give permissions to  | ||||||
|  | execute *path* as the *target_user*.   | ||||||
|  |  | ||||||
|  | *path* must contain the absolute path.  | ||||||
|  |  | ||||||
|  | Optional fields | ||||||
|  | --------------- | ||||||
|  | *args*: If you want to leave out optional arguments (argv) to *path*,  | ||||||
|  | simply don't  include this. Otherwise, simply specify them | ||||||
|  | args -v -ltr  | ||||||
|  |  | ||||||
|  | *allow_args*: Allow arbitrary arguments, so: | ||||||
|  | raou backup /path | ||||||
|  |  | ||||||
|  | Will launch "path" as specified in the file for the backup entry, but  | ||||||
|  | with "/path" as argv[1] instead of the arguments specified with "args". | ||||||
|  |  | ||||||
|  | *no_new_privs*: Defaults to 1. Processes launched with this option active | ||||||
|  | won't be able to gain more privileges, even when they call setuid programs. | ||||||
|  |  | ||||||
|  | *env_vars*: A comma-separated list of environment variables to inherit | ||||||
|  | from the current environment. Everything else will be wiped (but others | ||||||
|  | like HOME, SHELL etc. will be appropriately set).  | ||||||
|  |  | ||||||
|  | *argv0*: Set this option if you want to provide your own value as "argv0" | ||||||
|  | The default is the name of the launched binary (not the whole path).  | ||||||
		Reference in New Issue
	
	Block a user