Crates.io | illumos-priv |
lib.rs | illumos-priv |
version | 0.2.0 |
source | src |
created_at | 2019-06-20 21:14:55.410005 |
updated_at | 2021-03-16 16:18:42.890369 |
description | Crate providing an interface to illumos's PRIVILEGES(5) |
homepage | |
repository | https://github.com/joyent/rust-illumos-priv |
max_upload_size | |
id | 142429 |
size | 60,336 |
Adjust illumos privilege sets.
illumos implements a set of privileges that provide fine-grained control over the actions of processes. The possession of a certain privilege allows a process to perform a specific set of restricted operations.
See PRIVILEGES(5) for a list of privileges and their descriptions, or take a look at this crates documentation.
Dropping fork and exec privileges from a process running as root results in
failure to fork-exec ls
. Source for the below example can be found in
examples/fork-exec.rs.
root - rustdev ~/src/rust-illumos-priv (git:master) # cargo run --example fork-exec
Finished dev [unoptimized + debuginfo] target(s) in 0.02s
Running `target/debug/examples/fork-exec`
failed to fork/exec ls: PermissionDenied