trifectatechfoundation/sudo-rs
Sudo Rs
sudo-rs 是一个用 Rust 编写的底层系统实用程序和特权命令执行器。它提供了 sudo 和 su 的内存安全实现，用于以超级用户或其他用户权限运行程序，并将会话权限切换到其他本地用户身份。
该项目与内核安全模块集成，充当沙盒进程启动器，在执行期间限制系统资源和进程能力。
该实用程序包括对多语言系统本地化的支持，利用编译后的消息目录根据系统区域设置提供翻译后的用户界面文本。
Features
- Linux User Identity Switchers - Provides a memory-safe tool for switching session privileges to another local user identity on Linux.
- Privileged Shell Executions - Launches programs with elevated security permissions of another user or superuser within a memory-safe environment.
- Rust Systems Programming - Implemented as low-level system software in Rust to ensure memory safety and high performance for privileged operations.
- User Session Switching - Enables switching the current active system session to a different local user identity for administrative tasks.
- Application Sandboxing - Creates isolated environments using kernel security modules to prevent applications from accessing unauthorized system resources.
- Kernel-Based Sandboxing - Integrates directly with kernel security modules to enforce strict resource limits and security isolation for processes.
- Privilege Escalation Executors - Provides a memory-safe implementation of sudo and su for executing commands with superuser or alternate user permissions.
- Privileged Process Spawners - Provides mechanisms to spawn new system processes with elevated root-level credentials by altering user and group IDs.
- Process Sandboxing - Restricts system resources and process capabilities by isolating processes through kernel security module integration.
- Ownership-Based Safety - Leverages Rust's strict ownership and borrowing system to prevent buffer overflows and use-after-free vulnerabilities.
- Typed Error Management - Uses a result-based type system to ensure all possible failure states are explicitly managed during execution.
