Bug#1003059: ITP: su-exec -- switch user and group id, setgroups and exec

[Matteo Chesi]

Package: wnpp
Severity: wishlist

* Package name : su-exec
Version: 0.2, latest commit 2019-02-26
Upstream Author : Natanael Copa <nc...@alpinelinux.org>
* URL : https://github.com/ncopa/su-exec
* License : MIT
Description : switch user and group id, setgroups and exec

This is an alternative to gosu written in C.

It is minimal and already present in alpine linux.
It would be useful to have it for container environments.

[Ansgar]

On Mon, 03 Jan 2022 15:21:48 +0100 Matteo Chesi wrote:
> * Package name : su-exec

>    Description : switch user and group id, setgroups and exec
>
> This is an alternative to gosu written in C.

In Debian the essential util-linux package already provides "setpriv".
Is there any reason to use su-exec instead of it?

Ansgar

[Matteo Chesi]

Thanks Ansgar,

I did not know setpriv, I will test if it can replace su-exec on my
containers.

Probably the main reason could be binary size on certain small
systems/containers:

$ du -sh /usr/sbin/gosu
2.3M /usr/sbin/gosu
$ du -sh /usr/bin/setpriv
52K /usr/bin/setpriv
$ du -sh /usr/bin/su-exec
16K /usr/bin/su-exec

Best Regards,
Matteo