#capsudo 0.1.1 has been released!

[ariadne@social.treehouse.systems]

#capsudo 0.1.1 has been released!

https://distfiles.ariadne.space/capsudo/capsudo-0.1.1.tar.xz

If you are on Alpine edge and have testing packages enabled, you can install capsudo from there and then start the capsudo service.

If you want password authentication, use the capsudo-pwauth service which will challenge the capsudo client to provide your password, otherwise there is no authentication at all.

the tl;dr: capsudo is essentially sudo, but done with object capabilities instead of an SUID binary.

My blog last month explains the theory side of it and how you can use object capabilities to stitch all sorts of interesting things together without the need of a complex policy engine.

Part 2 of the series will land sometime this weekend... and then finally after that we will get to the chapter the Hacker News and Lobsters people wanted to skip to after that.

If someone wants to send me the bits to make this all work with systemd, that would also be great, but as I don't use systemd, I would have to otherwise guess.