https://github.com/msantos/noprivexec-go
noprivexec: disable setuid privileges
https://github.com/msantos/noprivexec-go
exec pledge prctl procctl setuid
Last synced: about 1 year ago
JSON representation
noprivexec: disable setuid privileges
- Host: GitHub
- URL: https://github.com/msantos/noprivexec-go
- Owner: msantos
- License: isc
- Created: 2024-02-25T13:21:27.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2024-11-22T12:29:33.000Z (over 1 year ago)
- Last Synced: 2025-02-13T05:30:04.042Z (over 1 year ago)
- Topics: exec, pledge, prctl, procctl, setuid
- Language: Go
- Size: 8.79 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# SYNOPSIS
noprivexec *cmd* *...*
# DESCRIPTION
noprivexec: disable setuid privileges
`noprivexec` disables the ability to use setuid privileges before executing
a command.
# EXAMPLES
```
$ noprivexec echo test
test
$ noprivexec sudo echo test
sudo: effective uid is not 0, is /usr/bin/sudo on a file system with the 'nosuid' option set or an NFS file system without root privileges?
$ noprivexec ping 8.8.8.8
ping: icmp open socket: Operation not permitted
```
# Build
```
go install codeberg.org/msantos/noprivexec-go/cmd/noprivexec@latest
```
To build a reproducible executable:
```
CGO_ENABLED=0 go build -trimpath -ldflags "-w" ./cmd/noprivexec/
```
# OPTIONS
# ALTERNATIVES
* [noprivexec](https://github.com/msantos/noprivexec)
* [noprivexec-rs](https://codeberg.org/msantos/noprivexec-rs)