SUS 3.3 (Default branch)
SUS is a (setuid root) utility to allow a user to
run a command as another user, typically the super
user (root). SUS consults a control file to
determine if the user is allowed to run the
specified command as the specified target user.
Very fine grained control is possible over what
commands may be run by considering commands and
arguments as references to UNIX objects, namely
users, groups, files, processes, and hosts.
Attributes of the referenced objects are used to
match against object class sets defined in the
control file.
License: GNU General Public License v3
Changes:
This version adds two new features: the ability to
use a hash of a file as an attribute for
comparisons and the ability to extract atttributes
of an existing file, user, or group and substitute
them into the control file at runtime.