sud 1.3

sud is a daemon to execute interactive and non-interactive processes with special (and customizable) privileges in a nosuid environment.
Some advantages of the program are:
you can switch to root privileges on a remote machine and keep its disks mounted with nosuid flag
your client will be authenticated by getting effective credentials via unix socket
you cant brute force or try to exploit code unless youre in the authgroup (you dont have permission to open a client connection)
you can drop privileges and use sud to implement a suid program in a nosuid environment
Main features:
- added multiple services in the same configuration file every service is in the form label { parameters... }
- added general daemon options with label = options
- added general service options with label = default
- added SO_PEERCRED linux support
- added SIGHUP, SIGUSR1 support
- added emergency service
- signals are now more reliable based on self-pipe trick
- sessions are now queued in a list
- introduction of three new modes: read (alias command), blind (alias write) and readwrite. these are very useful to emulate setuid programs which dont need a terminal and to redirect stdin and stdout to suipfiles
- changes in suz client in order to support new modes
- improvements in SIGWINCH management
- minor changes and new options for services
Enhancements:
- added multiple services in the same configuration file every service is in the form label { parameters... }
- added general daemon options with label = options
- added general service options with label = default
- added SO_PEERCRED linux support
- added SIGHUP, SIGUSR1 support
- added emergency service
- fixed timeout support in Linux (value-result) (Posix.1g specifies the const qualifier for timeout in select)
- signals are now more reliable based on self-pipe trick
- sessions are now queued in a LIST
- introduction of three new modes: . read (aka command) blind (aka write) readwrite
- these are very useful to emulate setuid programs which dont need a terminal
- and to redirect stdin and stdout to suipfiles
- changes in suz client in order to support new modes
- improvements in SIGWINCH management
- minor changes and new options for services