BSD Ports

security/py-privleap 6.5.1 DragonFly

Limited Privilege Escalation Framework

System
DragonFly
Repository
DPorts
Maintainer
[email protected] (as in FreeBSD)
License
AGPLv3
Categories
python, security
Package size
128.9 KiB, 685.8 KiB installed

Description

privleap is a privilege escalation framework similar in purpose to sudo and doas, but very different conceptually. It is designed to allow user-level applications to run very specific operations as root without allowing full root control of the machine. Unlike directly executable privilege escalation frameworks like sudo, privleap runs as a background service that listens for signals from other applications. Each signal can request a particular, pre-configured action to be taken. Signals are authenticated, and each action is taken only if the signal passes authentication. Any console output from the action is then returned to the caller. This system allows privleap to function without being SUID-root, and avoids a lot of the potential pitfalls of sudo, doas, run0, etc.

In the other systems

The newest version among them is 7.1.1, as upstream numbers it.

SystemPortVersionVulnerabilitiesStatusMaintainerLast update
DragonFlysecurity/py-privleap6.5.1 behind since 2026-10-09none known-[email protected]-
FreeBSDsecurity/py-privleap7.1.1 newestnone known-[email protected]2026-10-09
HardenedBSDsecurity/py-privleap7.1.1 newestno data-[email protected]-
GhostBSDsecurity/py-privleap7.1.1 newestno data-[email protected]-

Version history 1

  1. 6.5.1

Upstream's version as each commit to the port's Makefile set it, or as this site first saw it in the system's packages; the tree's own revisions are not versions here.

Install

Binary package:

pkg install py313-privleap

From DPorts:

cd /usr/dports/security/py-privleap && make install clean

Dependency graph

Ports that need it on the left, what it needs to run on the right; at most 8 of each. "Dependencies" below lists them all.

Dependencies

Run dependencies 2

No port depends on this one.

Configuration

No options to configure.

Service scripts
none

Message after installing

pam_exec(8) could be used to call leapctl(8) to create the
communication socket required by leaprun(8) by simply adding
the following to a PAM policy file:

  session    optional    pam_exec.so    /usr/local/libexec/privleap/pam_create_socket.sh