Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-20 Thread Jaromil
hi Dave and Jim and Teodoro hope you don't mind I reply your inquiries at once sup won't ever have a package, so I'm not worried about the namespace at all. It does not make sense to have a sup package, is really a tool for distro makers, people preparing containers, online services ran in a chr

Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-20 Thread Hendrik Boom
On Thu, Mar 17, 2016 at 09:29:56PM +0100, Jaromil wrote: > > sup is different from doas, because doas is configured at runtime: > http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/doas.conf.5 > while sup security model is based on the fact it has its settings > compiled in, so when one p

Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-19 Thread Jim Murphy
On Thu, Mar 17, 2016 at 5:14 AM, Jaromil wrote: > > dear devuaneers, suckless hackers and friends of simplicity > --- clipped > > Basically sup is an hard-coded sudo. > > I adopted the software (wrote a mail to pancake, pending response) and clipped the rest Hi, As an FYI: "sup" is not a

Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-19 Thread Teodoro Santoni
Hi, Cool! Have you considered also to send pull requests to the site repo or the sup git repository at suckless.org? ___ Dng mailing list Dng@lists.dyne.org https://mailinglists.dyne.org/cgi-bin/mailman/listinfo/dng

[DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-19 Thread Jaromil
dear devuaneers, suckless hackers and friends of simplicity In the past days we are working hard on Devuan, but also on our dyne.org project Dowse whose prototype is based on an RPi version of Devuan. Thinkering on the security model in Dowse and other projects, parazyd found the 'sup' tool to b

Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-19 Thread Dave Turner
On 17/03/16 17:32, Jim Murphy wrote: On Thu, Mar 17, 2016 at 5:14 AM, Jaromil wrote: dear devuaneers, suckless hackers and friends of simplicity --- clipped Basically sup is an hard-coded sudo. I adopted the software (wrote a mail to pancake, pending response) and clipped the rest Hi

Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-19 Thread Rainer Weikusat
Dave Turner writes: > On 17/03/16 17:32, Jim Murphy wrote: >> On Thu, Mar 17, 2016 at 5:14 AM, Jaromil wrote: >>> dear devuaneers, suckless hackers and friends of simplicity >>> >> --- clipped >>> Basically sup is an hard-coded sudo. >>> >>> I adopted the software (wrote a mail to pancake, pendin

Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-19 Thread Jaromil
On Thu, 17 Mar 2016, Rainer Weikusat wrote: > > Random suggestion: What about supporting a compiled-in path? this is a pretty good idea, thanks! won't be implemented right away as i don't need it immediately myself, time is so little... but a well written patch would be welcome on this ciao _

Re: [DNG] sup - a "small is beautiful" tool for UNIX privilege escalation

2016-03-18 Thread Rainer Weikusat
Jaromil writes: [...] > sup is different from doas, because doas is configured at runtime: > http://www.openbsd.org/cgi-bin/man.cgi/OpenBSD-current/man5/doas.conf.5 > while sup security model is based on the fact it has its settings > compiled in, so when one put the binary as suid, one can be s