• Bug#1109792: ITP: sr -- Role-based sudo alternative for privilege deleg

    From Eddie Billoir@21:1/5 to All on Wed Jul 23 23:50:01 2025
    XPost: linux.debian.devel

    Package: wnpp
    Severity: wishlist
    Owner: Eddie Billoir <[email protected]>
    X-Debbugs-Cc: [email protected], [email protected]

    * Package name : sr
    Version : 3.1.1
    Upstream Contact: Eddie Billoir <[email protected]>
    * URL : https://github.com/LeChatP/RootAsRole/
    * License : LGPL-3.0
    Programming Lang: Rust
    Description : Role-based sudo alternative for co-administration

    sr is the main tool of the RootAsRole project, providing a modern,
    memory-safe alternative to sudo. The projects enforces a Role-based
    access control model that allows precise delegation of administrative
    tasks.
    This package also includes chsr, a configuration utility designed to
    simplify the definition and management of roles.
    RootAsRole's design targets co-administration environments where several administrators with disctinct responsibilities share control, enabling separation of duties and limiting the privilege abuse. The overall projects scope aims to enable a unified and flexible access control policy framework.

    Hello, I'm the developer of RootAsRole, I worked on it all along my studies
    and it is now a serious alternative to sudo. But beyond the sr tool, the
    main objective of the project is to propose an orchestrator of low-level
    access controls mechanisms for high-level access control policies.
    As the main objective is to have more sophisticated access control policies,
    it imply way more rules in the policy, so now I am quite happy that the
    tool currently outperforms sudo by a raw 77% and scales 40% better.
    I use my own tool day-to-day on many Linux distributions, and I also
    use it for writing some sophisticated Ansible deployements access control policies, it works well and it's unit-tested.

    I admit that already started to do the deployement of some dependencies
    within the Rust Packaging Team conf tool, as I was a bit curious on the
    work that has to be made. I can start the first deployment effort but it
    miss several packages dependencies, so it's going to take some time.
    I don't know if I will have the time to both develop and maintain the
    package deployments over all the wanted distributions, so yes I'm
    looking for co-maintainers, it's always appreciated. And to answer the
    last question : yes, I need a sponsor.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris Hofstaedtler@21:1/5 to Eddie Billoir on Thu Jul 24 00:30:01 2025
    XPost: linux.debian.devel

    On Wed, Jul 23, 2025 at 11:41:50PM +0200, Eddie Billoir wrote:
    sr is the main tool of the RootAsRole project, providing a modern, memory-safe alternative to sudo.

    The package "surfraw" installs a program named "sr" into /usr/bin.
    If your package "sr" will also install a program names "sr" into a
    PATH component, then you will need to find a solution together with
    surfraw.

    Maybe one or both of the packages will need to rename their
    programs.

    Chris

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)