rsuid LSM is a Linux LSM kernel module that allows a user with a specific UID to switch to all users within certain ranges.
rsuid LSM changes the way certain process can do set*uid() and set*gid() calls. The restriction is enforced on a process, and all childs. A root process must enable the restriction, and it can't be turned off once enabled.
Semantics :
uid_min : lower allowed uid
uid_max : upper allowed uid
gid_min : lower allowed gid
gid_max : upper allowed gid
Root must set uid_min and gid_min before the module can be enabled. See the enable_rsuid script for an example.
A process can enable the restrictions by writing 'rsuid enable' into /proc/< pid >/attr/exec. When that happens, a process looses *all* of it's capabilities, even before it switches uid / gid.
Installation:
make
make install
Product's homepage
Find us on Google+
